摘要
在OpenBSD系统上开发了一种基于状态检测的防火墙,并开发了内置的检测和防范几种常见网络攻击(syn flood、端口扫描、分片攻击、icmp flood、smurf)的功能。由于大多数这种攻击总是用假冒的源地址和随机的源端口来产生攻击包,因此这种防范模型比入侵检测系统的检测-修改防火墙策略模型更为有效。
This paper develops a state inspection-based firewall on OpenBSD system, and develops a buildin function to detect and block some normal network attacks (syn flood, port scan, fragment attack, icmp flood, smurf ). This defense model is more effective than IDSs model which detectes attacks and changes firewall policies, because most attacks of these types always generate packets with spoof source address and random port.
出处
《计算机工程》
CAS
CSCD
北大核心
2004年第2期144-145,共2页
Computer Engineering
关键词
防火墙
状态监测
网络攻击
端口扫描
Firewall
Stateful inspection
Network attacks
Port scan
