网络已知攻击类型的防御方法

Defensive Methods on the Type of Known Network Attacks

随着网络的发展,网络的安全问题逐渐被人们所认识。网络攻击行为的不断发生,促使网络安全系统的诞生。该文提出的一个分布式入侵检测模型,能够对常见的具有攻击特征的入侵行为进行防御,同时在设计模型时,注意了标准化的设计,因此系统具有很高的升级性、可扩充性和适应性。最后,给出的端口扫描、嗅探器和IP欺骗防御代理设计,说明了如何进行标准化的代理设计满足模型目标。

With the development of the computer network,more and more people concern network security.Network security systems have been developed because network attacks happen everyday.A Distributed Intrusion Detection System Model is put forward in this paper to defend various attacks with certain attack features.At the same time ,great attention is paid to standardized design,so our system has excellent expansibility,scalability and adaptability.Lastly,three defensive agents,which are port-scanning agent ,sniffer agent and IP spoofing agent are designed in detail in order to explain how to conduct a standardized agent to meet our model objective.