在线阅读 --自然科学版 2009年1期《局域网防御蠕虫病毒方案的探讨》
局域网防御蠕虫病毒方案的探讨--[在线阅读]
周绯菲1, 王文杰2, 郝晓冰3, 王观海3, 赵军4
1. 交通部管理干部学院计算机系, 北京 100020;
2. 中国科学院研究生院, 北京 100080;
3. 燕山大学图书馆, 河北秦皇岛 066004;
4. 燕山大学机械工程学院, 河北秦皇岛 066004
起止页码: 33--36页
DOI:
摘要
蠕虫是对局域网安全产生严重威胁的病毒.为解决现阶段中型规模的局域网所面临的蠕虫泛滥的问题,以某单位局域网为研究对象,在相关理论研究的基础上结合该单位局域网的安全设计工程进行了安全方案的研究.设计了将计费网关与漏洞扫描及流量监测技术相结合的方案,解决了局域网客户端用户主机补丁包升级、局域网客户端主机漏洞扫描、漏洞主机提示以及暂时中止中毒主机访问互联网等问题.

The Study in Defending Worm Virus in Local Area Network
ZHOU Fei-fei1, WANG Wen-jie2, HAO Xiao-bing3, WANG Guan-hai3, ZHAO Jun4
1. Department of Computer, Beijing Communication Management Institute, Beijing 100020, China;
2. Graduate School, Chinese Academy of Sciences, Beijing 100020, China;
3. Library, Yanshan University, Hebei Qinghuangdao 066004, China;
4. College of Mechanical Engineering, Hebei Qinghuangdao 066004, China
Abstract:
Wo rms is a virus that could critically threat to LAN.In order to solve the problem of worms flooding in middle scale LAN,the LAN in an institute is studied.Based on the analyses of the situat ion of the present campus net work as well as the related theories,a security scheme is researched and desig ned both from the theoretical and practical perspectives in combination with the Three phase security improvement project in the LAN.Adding a charging gateway in combinat ion with leak scanning and net flow monit oring technology is proposed.The scheme intends to solve the problems in several aspects:patching operation sy stem,scanning serious leak,promoting computers that have serious leaks,and fighting against worms.It is able to suspend the Internet-visiting qualification on computers which have been infected by worms until such worms are cleared.It is able to notify the users who have some serious leaks in their operation systems or have not patched their operation systems in time in login page of the charging gateway.

收稿日期: 2008-3-8
基金项目: 国家“863”计划(2007AA01Z132-1)

参考文献: