摘要： 传统防火墙技术可分为两大类：一类是基于包过滤技术，另一类是代理技术．当前各种防火墙的实现中，对非服务攻击（包括欺骗攻击、源路由攻击等）的防范乏力，而资料显示这类攻击又是极为常用和易成功的．该文提出了路由记录分析（ＲＲＰ）技术，专门用于解决该类问题．

关键词: 防火墙, 非服务攻击, 路由记录分析

Abstract: There are two sorts in the traditional firewall technology: one is Packet-filtering,which restricts data stream on Internet Protocol (IP) Layer; the other is called proxy, which implements more control on Application Layer. Meanwhile, among the various firewall systems today, there is less guard for the application-independent attack (such as spoof attack, source route attack etc). While there are some data indicating that this attack is more popular and succeeds more easily, so it is a real careless oversight. So, the authors bring forward the route recording and parse (RRP) technique, which aims at this attack.

中图分类号: 

• TP393