摘要
论文介绍了windows平台下个人防火墙常用的网络数据包截获技术(NDIS-HOOK技术和中间层驱动技术)的原理、特点和不足,以及特洛伊木马如何穿透各种基于不同数据包截获技术的个人防火墙,并以此为基础,提出改进个人防火墙的一些建议和设想。
This paper introduces personal-firewall network datapacket intercepting technology on windows platform including the principle, characteristics and shortcomings of NDIS-HOOK and intermediate NDIS driver, and explains how the Trojan horse penetrates tile firewall in network communication. As a conclusion, some personal advice and presumption on improvement of personal-firewall are mentioned.
出处
《信息安全与通信保密》
2007年第1期145-147,共3页
Information Security and Communications Privacy
