基于ICMP协议的IP网络安全机制

Security Mechanism of IP Network Based on ICMP Protocol

ICM P是IP网络中非常重要的一个报文协议,目的在于提供目标主机的反馈信息。由ICM P协议引发的一系列安全威胁乃是现今网络安全问题的一个重要组成部分。本文主要分析了几种利用ICM P数据报进行的攻击手段,深入讨论了应对ICM P攻击的网络安全机制,旨在使读者通过本文能对ICM P数据报的阻塞和边界过滤策略有一个较全面地了解。

ICMP is a significant type of protocol. This kind of message is to send the feedback of the destination in IP network to the pack＇s source. Types of threat caused by the vulnerabilities of this protocol are the essential component of the network security. Some kinds of attack using ICMP messages as a medium are ana- lyzed in this paper at the initiation. Then the paper thoroughly discussed the blocking and edge filtering of ICMP messages ,which are meant to deal with the ICMP attacks, It is expected to give the reader a good understanding of the network security mechanism.