摘要
针对零日攻击的攻击原理分析定时更新补丁、防火墙、入侵检测系统、防病毒软件、UTM网关等传统被动防御方式的不足,建议从网络入口、PC端点进行各个层次的防御,来实现主动防御零日攻击.通过综合使用网关防御、实施分级保护域以及部署主机型入侵防御系统,启发式行为检测反病毒软件等技术及安全管理策略对抗零日攻击,基本达到对零日攻击实现"零日防护"的目的.
Based on the zero-day attack principle, the automatically in time update patch, firewall, intrusion detection systems,anti-virus software, UTM gateways and other traditional passive defense, active defense strategy is put forward. Recommendations from network border and desktops defenseing at all levels are suggested. Through the integrated use of gateway defense, implementation of the hierrchical protection domain,as well as the deployement of host-based intrustion prevention system, heuristic behavior detection technologies anti-virus software and security management strategy against zero-day attacks, the basic purpose can be achieved.
出处
《泉州师范学院学报》
2009年第4期7-10,共4页
Journal of Quanzhou Normal University
关键词
零日攻击
主动防御
分级保护
入侵防御系统
安全管理
zero-day attacks
active defense
hierarchical protection
instrusion prevention system
safetymanagement
