作者投稿和查稿 主编审稿 专家审稿 编委审稿 远程编辑

›› 2003, Vol. 29 ›› Issue (12): 38-.

• 论文 • 上一篇    下一篇

黑客入侵防范体系的设计与实现

刘宝旭,许榕生   

  1. 中国科学院高能物理研究所计算中心,中国科学院高能物理研究所计算中心 北京 100039
  • 发布日期:2003-06-25

Design and Implementation of the Precaution System Against Hacker Attack

LIU Baoxu,XU Rongsheng   

  1. (Computing Center, Institute of High Energy Physics, CAS,Beijing 100039)
  • Published:2003-06-25

摘要: 在分析黑客防范体系理论模型及相关研究的基础上,论述了黑客入侵防范体系的组成部件及若干关键单元技术,给出一种以评估为基础,以策略为核心,以防护、侦测、响应和恢复技术为工具,以管理为落实手段的动态、多层次的黑客入侵防范体系模型—EPPDRR-SM模型,基于该模型,实现了一个实用的黑客入侵防范体系。目的是为我国黑客入侵防范体系的研究、设计与实现提供一个参考模型。实验证明,该体系对黑客攻击具有较好的防护性能。

关键词: 黑客入侵, 防范体系, 安全策略, 安全管理, 陷阱网络, 入侵取证

Abstract: The article discusses the structure and several key unit technologies of the precaution system against hacker attacks, and provides a new kind of dynamic and multi-level network security model—EPPDRR-SM model,which bases on evaluation,takes the policy as core, protection, detection, response and restoration technologies as tools, management as the implementing measure. The purpose of the article is to provide the reference model for the research, design and implementation of the precaution system against hacker attack. The result of the experiments indicates that this system has effective performance against hacker attack.

中图分类号: