| Windows平台下Snort和IPSec联动实现 |
| |
| 引用本文： | 翟继强,乔佩利.Windows平台下Snort和IPSec联动实现[J].哈尔滨理工大学学报,2012,17(3):96-99. |
| |
| 作者姓名： | 翟继强 乔佩利 |
| |
| 作者单位： | 哈尔滨理工大学计算机科学与技术学院,黑龙江哈尔滨,150080 |
| |
| 摘 要： | 针对目前Windows平台上入侵防御系统对恶意数据在TCP/IP层上的过滤大都借助Windows内核或第三方防火墙的情况,提出利用Windows内嵌的IPSec筛选器和Snort入侵检测系统实现联动,在发现危险报警后,自动设置IPSec筛选器来对相应的数据进行过滤,并对改写后的Snort联动模块进行全面的测试,结果证明可以成功地实现对入侵数据包的阻塞.
|
| 关 键 词： | Snort IPSec 联动 IP筛选器 |
Implementation of Cooperation of Snort and IPSec Based on Windows |
| |
| ZHAI Ji-qiang
,
QIAO Pei-li.Implementation of Cooperation of Snort and IPSec Based on Windows[J].Journal of Harbin University of Science and Technology,2012,17(3):96-99. |
| |
| Authors: | ZHAI Ji-qiang QIAO Pei-li |
| |
| Affiliation: | (School of Computer Science and Technology,Harbin University of Science and Technology,Harbin 150080,China) |
| |
| Abstract: | There have been a few studies highlighting Network Intrusion Prevention System on Windows platform,while most implementations to filter the malicious data on TCP/IP recur to the third party firewalls or Windows kernel.The method to filter the relevant network traffic by configurating IPSec embedded in Windows automatically when finding dangerous alert by cooperation of Snort and IPSec is presented in this paper.The cooperation part of rewritten Snort was tested.The experimental results show that it can block invasive packets successfully. |
| |
| Keywords: | Snort IPSec cooperation IP Filter |
| 本文献已被 CNKI 维普 万方数据 等数据库收录！ |
