基于AET的仿真及防范分析

"AET"高级逃避技术是基于TCP/IP 7层中有一系列新型逃逸技术,来避开目前所有主流的IPS/IDS设备的检测,从而携带攻击代码进入针对目标服务器协议的漏洞进行攻击的。通过对AET的原理进行仿真分析,可以总结出一套检测、识别移除的方法,并整理出一些平时在校园网维护中对其有效的防范方法,从而提高校园网的安全性。     

Advanced monochrome gray‐scale TFT‐LCD using diamond‐like‐carbon/ion‐beam alignment technology

Abstract— A novel liquid‐crystal alignment method, diamond‐like carbon and ion beam alignment (DLC/IB) technology, was announced at the 2001 SID Symposium. And since December 2001, a new‐generation ion‐beam machine has been placed into the manufacturing line of IDTech. DLC/IB technology is mainly used for medical displays, which require a monochrome high‐density and super‐uniform display. We report on the latest developments of these advanced monochrome displays.     

基于多MA和DM的智能NIPS的新改进模型

通过深入分析入侵防御系统（IPS）、移动代理（MA）和数据挖掘（DM）技术的特点及优势,利用MA的特性,结合DM所具有的实时提取和辨识异常信息的优势,提出了一种基于多MA和DM的新智能入侵防御系统（NIPS）改进模型。可更有效地解决网络安全漏检和误报问题,进一步提高了NIPS的检测辨识决策和整体智能防御能力。     

民航空管气象网络安全建设方案设计与实现

研究目的是对民航气象信息网络系统安全加固,提高内网保护等级,对外网的入侵实施有效隔离。改进的方法是针对外网航空公司等VPN用户,使用网闸进行物理隔离,防火墙进行逻辑隔离,并增加IPS入侵防御体系。根据气象网络服务的用户不同,将气象网络划分内网和外网,分段隔离。所有气象资料数据经网闸传输。网闸实现内外2个网络安全区之间的非网络方式的安全单向数据传输,并保证安全隔离装置内外两个系统无电气物理连通。外网经过防火墙和IPS双重过滤,保障内网终端不受侵入,有效地保护民航气象信息网络的安全。内网的民航气象资料从服务器经网闸以千兆带宽高效、实时传输,此次优化调整提高效能促进气象业务的可持续发展。IPS、防火墙和网闸的建设投入,使民航气象内网的设备安全得到加固,外网的病毒感染隐患得到彻底解决。     

基于IPS的FTP协议事件检测引擎的设计与实现

事件检测引擎是基于FTP协议解析引擎中的重要组成部分之一。在对传统的网络安全技术进行研究的基础上,设计和实现了基于IPS的FTP协议事件检测引擎。阐述了FTP协议事件检测引擎的总体框架,建立了相关的模型。该引擎采用先进的NEL语言开发平台,实时地检测出异常流量,实现了实时、高性能的网络安全。     

入侵防御系统研究

为了澄清人们对入侵防御系统(Intrusion Prevention System,IPS)的认识,该文在分析了传统防火墙和入侵检测系统(IDS)不足的基础上,介绍了入侵防御系统的产生原因,比较了入侵检测系统和入侵防御系统,详细分析了入侵防御系统的工作原理。根据当前安全行业及相关行业的现状和发展趋势,重点预测了入侵防御系统未来的发展趋势。     

Evaluating intrusion prevention systems with evasions

Intrusion prevention systems have become a common security measure in the past 20 years. Their promise is the possibility to prevent known attacks against vulnerable, unpatched devices inside enterprise networks. However, evasion techniques that enable the attacker to evade the eye of the intrusion prevention system are a potential problem for this capability. These techniques take advantage of the robustness principle that has guided designers to create systems that will try to recreate protocol content from any input they receive. In this work, we evaluated the effectiveness of 35 well‐known evasions against 9 commercial and 1 free, state‐of‐the‐art, intrusion prevention systems. We conducted 4 experiments with one million attacks against each device. Each system lets a significant amount (0.1%‐45%) of attacks pass through unrecognized. Our results show that most existing intrusion prevention systems are vulnerable against evasions.     

A new low‐power driving method for high‐resolution mobile IPS LCDs

Abstract— High‐resolution displays are now needed for mobile equipment, not only for cell phones but for other devices such as ultra‐mobile PCs (UMPCs) and mobile Internet protocol televisions (IPTVs). A new low‐cost and low‐power driving method for high‐resolution in‐plane‐switching (IPS) liquid‐crystal displays (LCDs) on a low‐temperature polycrystalline‐silicon (LTPS) thin‐film‐transistor (TFT) platform has been developed. Because this method drives common electrodes separated by each line, it can reduce inversion frequency, unlike “dot‐inversion” or “column‐inversion” methods. On the other hand, it was found that horizontal smear is an obstacle to achieve this method. To solve this problem, techniques to optimize the timing of RGB time‐sharing are proposed. A 5‐in. WXGA (1366 × 768) prototype using the new driving method was fabricated, and it was found that the horizontal smear is less than ±1% of the luminance and that the power consumption of the display discharge and charge is 0.245 W.     

新视觉高清频道播出系统设计与实现

介绍了上海文广互动新视觉系列高清轮播频道播出系统建设的设计方案以及具体实施过程。遵循全台制播网络一体化的思想,由光纤和千兆以太网构建了全无带化的播出网络系统。其中,二级存储系统选择了统一存储的硬件结构。由于采用了嵌入式音频技术,系统链路结构更加趋于简单。另外,入侵防御系统的使用将网络安全提升到了崭新的高度。运行2年以来,给广大观众带来了稳定的播出质量和美妙的视觉享受。     

计算机网络安全技术现状研究

通过对当前网络安全所面临的问题的论述,对当前的网络攻击手段的方式进行了总结。然后对网络防御技术:入侵检测系统和入侵防御系统的发展和历史进行了总结,归纳了这两种安全防御技术的优缺点,最后提出了网络安全防御技术的发展趋势和方向。