【24h】

The Countermeasure for IP Fragment Attacks in Intrusion Detection

机译:入侵检测中IP碎片攻击的对策

获取原文
获取原文并翻译 | 示例

摘要

Intrusion detection has become an essential component of computer security in recent years. The role of an IDS (intrusion detection systems) is to warn administrators of suspicious and potentially malicious computer activity. Security administrators are complementing existing security measures with IDSs to achieve defense in depth. But most IDSs can not handle with IP fragmentation reassembly at all. An attacker can completely evade the IDS by fragmenting every packet she sends across the network. So it is important to understand the principle of fragment and how it works. This paper descripts the attacks aimed at the fragment and how to deal with the problem.
机译:近年来,入侵检测已成为计算机安全的重要组成部分。 IDS(入侵检测系统)的作用是警告管理员可疑的和潜在的恶意计算机活动。安全管理员正在使用IDS补充现有的安全措施,以实现深度防御。但是大多数IDS根本无法处理IP分片重组。攻击者可以通过分段整个网络上发送的每个数据包来完全逃避IDS。因此,了解片段的原理及其工作原理非常重要。本文描述了针对碎片的攻击以及如何处理该问题。

著录项

相似文献

  • 外文文献
  • 中文文献
  • 专利
获取原文

客服邮箱:kefu@zhangqiaokeyan.com

京公网安备:11010802029741号 ICP备案号:京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有
  • 客服微信

  • 服务号