摘要： 提出了-种基于Linux的网络防火墙中协议栈指纹消除的方法,其基本思想是:动态地修改Linux内核的协议数据包处理流程,屏蔽掉操作系统对数链层以上的数据包处理流程,消除了操作系统所固有的协议栈指纹,可以较好地防范黑客对防火墙的攻击。
关键词:
Linux,
网络防火墙,
协议栈指纹,
消除
Abstract: A method to eliminate the protocol fingerprint in network firewall based on Linux is presented in this paper.This method can be described as follows: dynamically revising the network flow of the operating system by module programming, blocking the network operations of the system applications, exterminating the fingerprint of TCP/IP protocol suites, preventing the hacker from attacking the firewall.
中图分类号:
郑力明,张会汀,刘伟平,黄伟英,方山. 基于Linux的网络防火墙中协议栈指纹的消除[J]. , 2004, 30(24): 92-.
ZHENG Liming1,2, ZHANG Huiting1, LIU Weiping1, HUANG Weiying1, FANG Shan1. Elimination of Protocol Fingerprint in Network Firewall Based on Linux[J]. , 2004, 30(24): 92-.