黑客入侵防范体系的设计与实现

Design and Implementation of the Precaution System Against Hacker Attack

在分析黑客防范体系理论模型及相关研究的基础上，论述了黑客入侵防范体系的组成部件及若干关键单元技术，给出一种以评估为基础，以策略为核心，以防护、侦测、响应和恢复技术为工具，以管理为落实手段的动态、多层次的黑客入侵防范体系模型—EPPDRR-SM模型，基于该模型，实现了一个实用的黑客入侵防范体系。目的是为我国黑客入侵防范体系的研究、设计与实现提供一个参考模型。实验证明，该体系对黑客攻击具有较好的防护性能。

The article discusses the structure and several key unit technologies of the precaution system against hacker attacks, and provides a new kind of dynamic and multi-level network security model—EPPDRR-SM model,which bases on evaluation,takes the policy as core, protection, detection, response and restoration technologies as tools, management as the implementing measure. The purpose of the article is to provide the reference model for the research, design and implementation of the precaution system against hacker attack. The result of the experiments indicates that this system has effective performance against hacker attack.