摘要： 黑客在攻击目标系统之前,扫描是必不可少的一个环节,通过扫描可以了解目标运行的操作系统、存在的漏洞等。为了有效防止黑客的扫描攻击,该文提出了利用netfilter/iptables技术实现操作系统的伪装。这种方法不需要修改TCP/IP协议栈,对内核的影响很小,保证了系统运行的稳定性。通过为黑客提供虚假的信息,能够成功欺骗黑客使其攻击缺少针对性,从而,有效的保护了系统的安全性。

关键词: 伪装操作系统, Netfilter, Iptables, 欺骗

Abstract: Before he prepares for attacking the target, the hacker will firstly scan the system. Through scanning he can find out the operating system and vulnerabilities of the target, etc. In order to prevent the scanner attack effectively, we bring forward how to use netfilter and iptables to disguise the OS. By using this method, we do not need to modify the stack of TCP/IP, the impact to the kernel becomes very small, thus we can guarantee the stability of the system. By providing fake information to him, we can successfully deceive the hacker and protect the security of our systems effectively.

中图分类号: 

• TP393.08