下一代应用层防火墙性能及其测试

针对Internett越来越复杂的网络攻击，防火墙已经由过去单纯的底层包过滤型防护墙向下一代的应用层防火墙转变，从而对下一代网络安全测试也提出了新的要求。在进行网络安全评估时，需要采用新的状态流，同时还必须综合考虑防火墙的具体设置。该文对下一代应用层防火墙的发展现状及趋势、测试技术及方法进行了探讨，为进一步探索新的应用层防火墙测试技术提供基础依据。     

选择传递攻击中的异常丢包检测

该文提出了一种基于检查点的多跳确认方案来检测选择传递攻击所导致的异常丢包．在这个方案中，能够随机地选取传递路径中的部分节点为检查点，负责包的确认．这种随机检查点选择技术能够避免部分节点成为敌方俘获的目标，从而在保证检测能力的同时有效地提高了系统的健壮性．文章对检测率进行了理论分析，并进一步通过模拟实验对检测率进行了验证．     

传感器网络中的安全性和保密性

为了缓解传感器网络在安全性和保密性方面的困境,对传感器节点、窃听、监测数据、拒绝服务攻击等易被攻击环节的安全性问题进行了探讨,并从硬件和软件两个方面,提出了改进协议、数据加密、访问控制、多路发送、分布式询问等多种抵御攻击的办法。     

DDoS攻击防御机制综述

DDoS攻击是目前威胁网络安全的主要因素之一。本文分类介绍了现有的DDoS攻击防御机制,阐明了各种机制之间的关系,给出了每种防御机制的应用实例,全面分析了各种防御机制的优缺点。对正确认识DDoS攻击及其防御有很大的参考价值。     

EMDR Therapy Following the 9/11 Terrorist Attacks: A Community-Based Intervention Project in New York City.

This article presents the results of a time-limited psychological relief effort using eye movement desensitization and reprocessing (EMDR) following the attacks on the World Trade Center on September 11, 2001. Clients made highly significant positive gains on a range of outcome variables, including validated psychometrics and self-report scales. Analyses of the data suggest 2 broad conclusions: EMDR is a useful treatment intervention both in the immediate aftermath of disaster as well as later; the longer treatment is delayed, the greater the level of disturbance experienced by clients. Also discussed are problems in conducting research during mass disaster response situations. A demonstration of an analog to a wait-list control group is provided. (PsycINFO Database Record (c) 2010 APA, all rights reserved)     

基于移动代理、关键主机隐藏技术的IDS体系结构

本文介绍了一种安全灵活的入侵检测系统体系结构，通过运用关键主机隐藏技术，使关键主机对于主动探测，被动监听均不可见，提高了系统自身的安全性，同时，通过引入移动代理，限制入侵检测系统各部分之间的通信等机制，增强本体系结构对于拒绝服务攻击的抵抗力，系统通过使用智能移动代理在网络节点上收集处理信息，提高了入侵检检测系统的灵活性，减少了网络负载。     

一种基于多点传送树的拒绝服务攻击的安全方案

拒绝服务攻击严重威胁着Internet的安全,而且其入侵工具的发展是一种长期存在的趋势。文章介绍了一种新的拒绝服务攻击的安全方案,通过使用多点传送树作为基本的认证机制来进行IP多点传送认证,从而对拒绝服务攻击免疫。     

网络攻击行为分类技术的研究

文章在研究国外网络攻击行为分类技术的基础上，从安全系统和安全产品评测的目标出发，提出了适合评测需要的网络攻击行为分类体系，阐述考虑分类问题着眼点以及确定的攻击分类原则和攻击分类标准。     

一种基于状态监测的防火墙

在OpenBSD系统上开发了一种基于状态检测的防火墙，并开发了内置的检测和防范几种常见网络攻击(syn flood、端口扫描、分片攻击、icmp flood、smurf)的功能。由于大多数这种攻击总是用假冒的源地址和随机的源端口来产生攻击包，因此这种防范模型比入侵检测系统的检测-修改防火墙策略模型更为有效。     

Memory and Emotions for the September 11, 2001, Terrorist Attacks in Patients With Alzheimer's Disease, Patients With Mild Cognitive Impairment, and Healthy Older Adults.

National traumatic events can produce extremely vivid memories. Using a questionnaire administered during telephone interviews, the authors investigated emotional responses to, and memory for. the September 11, 2001, terrorist attacks in patients with Alzheimer's disease (AD), patients with mild cognitive impairment (MCI), and healthy older adults in the initial weeks following the event and again 3-4 months later. There were several notable findings. First, patients with AD showed less memory than patients with MCI and older adults. Second, patients with AD, but not patients with MCI or older adults, appeared to retain more memory for personal versus factual information. Third, patients with AD and older adults did not differ in the intensity of their reported emotional responses to the attacks, whereas patients with MCI reported relatively less intense emotional responses. Last, distortions of memory for personal information were frequent for all participants but were more common in patients with AD. (PsycINFO Database Record (c) 2010 APA, all rights reserved)