论文部分内容阅读
网络防火墙作为一种通用的网络安全产品 ,并不能完全满足电力企业的实际需要和特定的场合 ,用户往往不得不借助于第三方的安全产品或自己开发的安全软件 ,因而存在如何与现有的网络安全系统形成一个整体的企业安全体系问题。针对该问题 ,文中介绍了在OPSEC(开放安全企业互联平台 )的开发环境下 ,以目前几种常见的黑客攻击手段 (DDOS ,Trojanhorses与Port Scan)为研究对象 ,利用开放性协议OPSEC提供的公用接口 ,将设计的自动入侵检测报警的安全软件作为一个扩展的防火墙管理模块嵌入到支持OPSEC的企业网络防火墙中 ,配合原有的防火墙管理模块共同防御黑客攻击的开发实践。
As a universal network security product, network firewall can not fully meet the actual needs of power companies and specific occasions, users often have to resort to third-party security products or their own development of security software, so there is an existing Network security system to form an overall enterprise security system. Aiming at this problem, this paper introduces how to exploit some common hacker attacks (DDOS, Trojanhorses and Port Scan) under the OPSEC (Open Security Enterprise Internet Platform) development environment and make use of the open protocol OPSEC to provide public Interface, the designed security software of automatic intrusion detection and alarming is embedded as an extended firewall management module into the OPSEC-supported enterprise network firewall, cooperating with the original firewall management module to jointly defend the development of hacker attacks.