互联网络攻击的控制与防范

计算机网络的攻击技术越来越成熟，新一代的攻击目标直指互联网基础协议TCP／IP和操作系统层次，本文介绍了主动式Sniffer、内核rootkits、sniffer/Backdoors、DRDoS等新出现的网络攻击技术，分析了其原理和特性，着重介绍了与传统攻击手段的不同之处，提出了应对网络攻击、加强网络安全防范、健全网络安全体系的五项措施，为解决网络安全做出了有益的探索。

Control and Defense for attack from Internet Network

Since the attack technique for computer networks grows rapidly, the basic protocol of Internet, TCP/IP, and operation system are the targets of some new attack styles. The new network attack technique such as Sniffer?rootkits?Sniffer/Backdoors?DRDoS are described. The principle and characteristic of these methods, especially the difference from the traditional ways, are introduced. Next, five steps for dealing with the network attack, enhancing network security defense, setting up the basic network security environment are described.