《中低端路由器的攻击和防范》-毕业设计（论文）.docVIP

浙江大学硕士学位论文 STYLEREF 标题,章标题(无序号) Abstract PAGE i 低端路由器的攻击与防范 摘要 当今网络发展很快，安全漏洞也随之增加，安全问题也变成了人们日益关注的问题。有来自局域网的ARP攻击，也有来自广域网的DOS攻击和端口扫描攻击。攻击者会利用这些攻击来获取对用户敏感的技术文档和对个人用户敏感的账号和密码。在大型的网络中都有部署防火墙、IDS（入侵检测系统）等大型的贵重设备来保护网络的安全。但在中小企业网中，为了降低成本，只能购买一些低端的网络设备。然而当今市面上的低端网络设备大多都没有防攻击的功能，这使中小企业的网络安全问题成为了一个空白。 本论文就是针对这种需求，在低端的路由器上实现防火墙，IDS（入侵检测系统）的一些防护功能，嵌入到该系统中去，正真能够起到防攻击的作用。本论文会分析当今流行的攻击手段和方法，利用现有的组网环境构造异常的报文攻击网络设备，利用工具截获攻击报文，把该攻击报文解析出来，然后根据网络的知识，对该报文进行分析，找出其中的规律和攻击原理，根据该分析，提出有效的防攻击手段。文中还会描述防攻击在路由器内部的一些详细实现。本文主要通过Linux系统来实现防ARP攻击，防DOS攻击和防端口扫描攻击。 关键词：　网络安全，防攻击，DOS攻击 浙江大学硕士学位论文 Abstract 浙江大学硕士学位论文 Abstract PAGE ii PAGE ii Abstract With the rapid development of network, the network security problem is become vulnerabilities, people pay more attation about the security problem. There are a variety of ARP attacks within local area network; also there are DOS attacks and port scanning attacks within wild area network. Hackers can use these attacks to obtain sensitive technology documents from corporation, and they also can obtain sensitive user account and password to the individual. In a large network environment, there are firewall, IDS (Intrusion Detection System), and other large equipment to protect valuable network security. However, in small and medium business networks, they can not afford to purchase such expensive equipment, in order to reduce costs, have to buy some low-end network equipment. However, low-end network equipment do not have the anti-attack function in todays market, there is a blank in small and medium business networks. This paper can fill the requirements, embedded the firewall and IDS (Intrusion Detection System) module to the low-end routers. Low-end routers are really able to play the role of anti-attack. This paper will analyze the current