主机攻击分析及安全防护初探

Analysis of host attacking and its security protection

基于攻击者攻击主机的基本步骤 ,对其中关键步骤在攻击过程中所担当的任务进行了分析 ,总结出了若干攻击特征 .根据所给出的攻击特征 ,设计了一个主机监测系统 ,讨论了该监测系统各组成要素的主要功能及监控机制 .通过主机监测系统对攻击的监控 ,增强了主机的实时安全防护能力 。

According to the steps of host attacking, the crucial steps during the process of attacking were analyzed and some attacking features were summarized. Based on the attacking features, host supervision system was designed and the main functions of each element of the system and its supervision mechanism were discussed. By monitoring the host supervision system, the ability of real-time security protection of host was strengthened and the security of host was enhanced.