摘要： 在OpenBSD系统上开发了一种基于状态检测的防火墙,并开发了内置的检测和防范几种常见网络攻击(syn flood、端口扫描、分片攻击、icmp flood、smurf)的功能。由于大多数这种攻击总是用假冒的源地址和随机的源端口来产生攻击包,因此这种防范模型比入侵检测系统的检测-修改防火墙策略模型更为有效。

关键词: 防火墙, 状态监测, 网络攻击, 端口扫描

Abstract: This paper develops a state inspection-based firewall on OpenBSD system, and develops a buildin function to detect and block some normal network attacks (syn flood, port scan, fragment attack, icmp flood, smurf ). This defense model is more effective than IDSs model which detectes attacks and changes firewall policies, because most attacks of these types always generate packets with spoof source address and random port.

中图分类号: 

• TP393.08