计算机网络安全双语chapter 8 Firewall.pptVIP

Chapter 10 System Security;主要内容;木马;Trojan Horse Defense;Trojan Horse Defense;Trojan Horse Defense;;;products -- device;;products – pure software;Outline;What is firewall;the aims of Firewall;Four general techniques;Outline;Types of Firewalls;Packet-filtering;Packet-filtering;Applies a set of rules to each incoming IP packet and then forwards/discards the packet based on matches to fields in the IP or TCP header Advantages: Simplicity, Transparency to users, High speed Disadvantages: Difficulty of setting up packet filter rules, Lack of Authentication ;An example;;思考;(2) Application-level Gateway;Application-level Gateway;Advantages: Higher security than packet filters Only need to scrutinize(细察) a few allowable applications. Easy to log and audit(审计) all incoming traffic Disadvantages: Additional processing overhead on each connection;(3) circuit-level gateway;电路层网关;E.g. Socks软件包;(4) Stateful Inspection Firewall ;Outline;(1) Screened host firewall system ;bastion host directly connected with the public network packet-filtering router Only packets from and to the bastion host are allowed to pass through the router. ;(2) Screened-subnet firewall system;An example of Screened firewall;Honey-pot;入侵检测系统(以下为计算机专业的内容);入侵检测系统;信息收集;;信息分析;基于用户行为剖面的检测;;结果处理;衡量IDS性能的关键指标;Most security