摘要
信息攻防之间的不对称性要求信息安全领域亟需一种新的解决方案。而信息欺骗技术可以有效地增加攻击者的负担,减低其攻击效率,同时为安全管理员提供攻击者的意图和攻击方法等信息。本文提出的利用地址解析协议实现地址空间的欺骗可以有效增加攻击者的攻击难度,并为后续攻击信息的获取提供基础。演示结果证明了该方法的有效性。
The information protection field has an increasingly pressing need for innovations that change the balance between attack and defense. Information deception techniques have demonstrated their ability to increase attacker workload and reduce attacker effectiveness while decreasing defender effort required for detection and providing substantial increases in defender understanding of attacker capabilities and intent. This paper provides a new address space spoofing technology by using ARP（Address Resolution Protocol） that can be the basis to gather information about the attacks and attackers. The simulation results have verified this method.
出处
《信息与电子工程》
2005年第3期186-188,216,共4页
information and electronic engineering
基金
国防预先研究基金项目(41001040303)
关键词
计算机系统结构
网络安全
信息欺骗
地址空间
网络攻击
computer architecture
network defense
information deception
address space
network attack
