浅谈企业局域网中蠕虫病毒的防范

Prevention on Worm Virus of Enterprise LAN

介绍了蠕虫病毒的传播原理以及对企业局域网的影响。针对网络管理员和普通用户两个方面阐述了蠕虫病毒的防范措施。详细描述了基于ACL策略的蠕虫病毒防范、基于DHCP-Snooping策略的蠕虫病毒防范和基于桌面管理系统策略的蠕虫病毒防范。同时对于企业局域网中最为常见的conficker蠕虫病毒进行了攻击模式分析和解决方案,并给出了用户所需要了解的防蠕虫病毒IE设置。为同类企业的蠕虫病毒防范提供参考。

This paper introduces the spread principles of worm virus and its influences on the enterprise LAN. Also, the paper elaborates the worm virus preventive measures in consideration of LAN administrators and ordinary users by interpreting the worm virus preventive measures based on ACL strategy, DHCP-Snooping strategy and the desktop management system strategy. The attack mode of confleker worm virus, which is the most common worm virus in the enterprise LAN, and the corresponding solutions is analyzed. At last, the worm virus preventive IE settings which is useful for the ordinary users is described. The paper provides a reference regarding the prevention of the worm virus.