| 基于FPGA的内网安全防护系统关键技术研究 |
| |
| 引用本文： | 刘帅,范波,程久军,刘丙双.基于FPGA的内网安全防护系统关键技术研究[J].电信网技术,2010(6):8-14. |
| |
| 作者姓名： | 刘帅 范波 程久军 刘丙双 |
| |
| 作者单位： | [1]同济大学电子与信息工程学院计算机系 [2]北京大学计算机科学技术研究所信息安全工程研究中心 |
| |
| 摘 要： | 鉴于目前交换网络中安全防范的不足,提出了基于FPGA硬件的内网安全防护系统。该系统针对交换网络中流行的攻击手段及潜在的安全威胁,实时监听网络流量,发现并终止攻击,同时修复网络,以保障安全。测试结果表明：该系统对局域网内的主要攻击具有检测和防御功能,可以应用在通常的交换网络中实现安全防护。
|
| 关 键 词： | FPGA ARP欺骗 DHCP欺骗 MAC泛洪 混杂模式 |
Study on the Key Technology of the Security Guard System for Switched Network Based on FPGA |
| |
| Abstract: | In order to address the insufficient security of switched network, a security guard system based on FPGA is presented. Directed against popular means of attacks and potential security threats in switched network, our approach is that the system monitors every passing-by ethernet packet, identifies and terminates those attacks, at the same time,brings the network back to normal, so that the switched network can be secure. The test results show that the system has the functions of detection and defense for th... |
| |
| Keywords: | FPGA ARP spoofing DHCP spoofing MAC flooding promiscuous mode |
| 本文献已被 CNKI 维普 等数据库收录！ |
|
