网络攻击与防御技术的研究与实践_魏为民.pdf

2012 12 doi 10.3969/j.issn.1671-1122.2012.12.016 Research and Practice of Network Attacks and Defense Techniques WEI Wei-min, YUAN Zhong-xiong ( School of Computer and Information Engineering, Shanghai University of Electric Power, Shanghai 200090, China ) Abstract: Network attacks and defense, as core content in the fi eld of the information security, introduce a kind of educational method called situational teaching which separate attacking roles as well as defending ones apart dividing this course into 12 subjects: scanning, network sniffi ng, password cracker, spoofi ng attacks, denial of services, buffer overfl ows, Web attacks, SQL injection, Trojan horse, computer virus, mobile virus, fi rewall as well as intrusion detection; each group containing 6 students have one task, half of whom belong to the attacking fi elds while the remaining should work on the opposite side. We sincerely hope that through this practice students’ comprehensive capability including practical ability, self-learning ability and how to solve, analyze one problem as well as to get along with others can be improved to some extent. Key words: network attacks and defense; password cracker; spoofi ng attacks; SQL injection 2012 12