基于防火墻的端口掃描防護(hù)系統(tǒng)設(shè)計(jì)與實(shí)現(xiàn)

1、電子科技大學(xué)碩士學(xué)位論文基于防火墻的端口掃描防護(hù)系統(tǒng)設(shè)計(jì)與實(shí)現(xiàn)姓名：張祺申請(qǐng)學(xué)位級(jí)別：碩士專業(yè)：計(jì)算機(jī)應(yīng)用技術(shù)指導(dǎo)教師：韓宏20070602AbstractWiththerapiddevelopmentofIntemetnetworkprofoundlyinfluencesmanyfieldsofsocietyWhilepeople喇oytheconvenienceandgreatefficiencybroughtbytheIntern

2、ettheircomputersareexposedtoallkindsofattacksandintrusionPort$callisthecriticalstepofnetworkintl“usionHenceitisveryimportanttoprotectUS‰thekindofattackAtpresenttheconllnollmethodofportscanistoconstructadatapacketwhichhas

3、beeninastateofcIosulerespondsfortheabnormaldatapacketswhichwehavereceivedHoweverifaTCPconnectionrequireddatapacket，withsuchprotectiontechnologyhostinformationwillleadtoInformationleakageAbouttheproblem，anumberofsolutions

4、hadbeenproposedButthehavedifferentdefects，forexample：networkseeurityresearchersGeorgeKurtzputforwardawaytedueoOCCUlTellCI。oftheportscanbylimitingtherangeofIPaddressesHoweveriftheinvadersUSeIPspoofingtosendaTCP—SYNconnect

5、iontequiredatapacketthisproblemstillexistsTosolvetheabovoproblems，thispaperproposesanovelportscanprotectiontechnologybasedonstateinspectionByconstructingastateofanopeningport，Wecouldanalyzetheactionofscanandresponsewitha

6、mockanswerwhiehletattackerslO$ethelictI：lalinformationofahostInadditionforperformancereasonandtheabilitytointegrate、)lritllfirewaUWeimplementtheportscanprotectiontechnologyonfirewallTheentiresystemcould，rtm勰apluginofatir

7、ewallorindependentlyInthispaperatfirstitdescribedfirewallrelatedtechnologyandcaptureteelanologyofdatapacketinthewindowsoperationsystemThenitpresentedthestructureofsystemdesignandimplementationoftherelatedmodulesAtlastitg