中低端路由器的攻擊和防范硕士毕业专业论文.docVIP

低端路由器的攻击与防范 摘要 当今网络发展很快，安全漏洞也随之增加，安全问题也变成了人们日益关注的问题。局域网ARP攻击，DOS攻击和端口扫描攻击。会利用这些攻击来获取对敏感的技术文档对个人用户敏感的账号和密码。在大型的网络中都有防火墙IDS（入侵检测系统）等大型的贵重设备来保护网络的安全。但在中小企业网中，为了降低成本，只能购买一些低端的网络设备。然而当今市面上的低端网络设备大多都没有防攻击的功能，这使中小企业的网络安全问题成为了一个空白。本论文就是针对这种需求，在低端的路由器上实现防火墙，IDS（入侵检测系统）的一些防护功能，嵌入到该中去，正真能够起到防攻击的作用。本论文会分析当今流行的攻击手段和方法，利用现有的组网环境构造异常的报文攻击网络设备，利用工具截获攻击报文，把该攻击报文解析出来，然后根据网络的知识，对该报文进行分析，找出其中的规律和攻击原理，根据该分析，提出有效的防攻击手段。还会防攻击在路由器内部的一些实现。 关键词：　网络安全，防攻击，DOS攻击 Abstract With the rapid development of network, the network security problem is become vulnerabilities, people pay more attation about the security problem. There are a variety of ARP attacks within local area network; also there are DOS attacks and port scanning attacks within wild area network. Hackers can use these attacks to obtain sensitive technology documents from corporation, and they also can obtain sensitive user account and password to the individual. In a large network environment, there are firewall, IDS (Intrusion Detection System), and other large equipment to protect valuable network security. However, in small and medium business networks, they can not afford to purchase such expensive equipment, in order to reduce costs, have to buy some low-end network equipment. However, low-end network equipment do not have the anti-attack function in todays market, there is a blank in small and medium business networks. This paper can fill the requirements, embedded the firewall and IDS (Intrusion Detection System) module to the low-end routers. Low-end routers are really able to play the role of anti-attack. This paper will analyze the current attack, constitution the abnormal message attack network equipment, intercepted the attack packets using tools, resolution the attack packets, then based on the knowledge of network to analysis the attack packets and how to preventing attacks. According to the analysis, we can propose an effective method of preventing attacks. This paper will also introduced