摘要
保证网络系统安全,需要提供一个集网络检测、渗透、入侵、防护等功能为一体的综合解决方案.该系统分为客户端和服务器端两部分实现.客户端集成了安全检测和攻击功能,能够对目标网络系统的安全状况和漏洞进行检测,同时根据检测的结果进行模拟的攻击和入侵.服务器端通过入侵检测,发现受到的模拟攻击,根据客户端的发送的模拟攻击标志,从数据库中调出相应数据,模拟出系统受到攻击的动态过程,以及系统遭受入侵后的破坏程度.该训练平台不仅可以进行在线实战时的检测和攻击,同时也可用于培养有实战经验的网络安全管理员.
This paper offers a method of collecting the function involving network detection, penitration, intruding and protection of one whole platform in order to guarantee the security of the system. This system is divided into client and server. The client integrates the function of security detection and attack, it can measure the security and hole of the goal system and attack or invade the system according to the result of detecting at the same time. Server carries on system detecting and simulation of being attacked, accesses the corresponding data from the database after judging according to location sign, and simulates the dynamic process while system is attacked and the destruction degree after intruding. This platform system can not only detect and attack in the case of actual combat, but also be used for training the administrator with actual combat experience.
出处
《中原工学院学报》
CAS
2004年第1期5-8,共4页
Journal of Zhongyuan University of Technology
基金
河南省科技攻关项目(0111061200)
