| 个人防火墙突破技术研究与防范措施 |
| |
| 引用本文： | 胡勇,吴少华,周安民.个人防火墙突破技术研究与防范措施[J].成都信息工程学院学报,2008,23(3):235-238. |
| |
| 作者姓名： | 胡勇 吴少华 周安民 |
| |
| 作者单位： | 四川大学信息安全研究所,四川成都,610064 |
| |
| 摘 要： | 首先分析了Windows的网络结构,并在此基础上分析了包括SPI封包截获技术、TDI过滤驱动、NDIS钩子驱动在内的各种个人防火墙技术,然后根据个人防火墙特点以及技术缺陷,给出了几种穿透防火墙的方法以及相应的代码,最后提出改进个人防火墙的一些建议。
|
| 关 键 词： | Windows网络结构 个人防火墙技术 TDI过滤驱动 NDIS钩子驱动 PE加载 |
Study of personal-firewall technology and preventive measures |
| |
| HU Yong,WU Shao-hua,ZHOU An-min.Study of personal-firewall technology and preventive measures[J].Journal of Chengdu University of Information Technology,2008,23(3):235-238. |
| |
| Authors: | HU Yong WU Shao-hua ZHOU An-min |
| |
| Institution: | HU Yong,WU Shao-hua,ZHOU An-min(Institute of Information Security,SCU,Chengdu 610064,China) |
| |
| Abstract: | The network architecture of the Windows is analyzed and based on this analysis a variety of personal-firewall technology including the SPI intercepted packet technology,TDI filter driver and NDIS-HOOK drivers is analyzed.According to the features of the personal-firewall and the technical flaws several methods of the penetration through the firewalls and the corresponding code are given.Some suggestions about the improvement of the personal firewall are presented. |
| |
| Keywords: | network architecture of Windows personal-firewall technology TDI filter driver NDIS-HOOK driver |
| 本文献已被 CNKI 维普 万方数据 等数据库收录！ |
|
