《计算机网络》6th-Chapter-8-V6.0.pptVIP

* * * * * * * * * Network Security Limitations of firewalls, gateways IP spoofing: router can’t know if data “really” comes from claimed source if multiple app’s. need special treatment, each has own app. gateway client software must know how to contact gateway. e.g., must set IP address of proxy in Web browser filters often use all or nothing policy for UDP tradeoff: degree of communication with outside world, level of security many highly protected sites still suffer from attacks Network Security Intrusion detection systems packet filtering: operates on TCP/IP headers only no correlation ch