NÂNG CAO MỨC ĐỘ BẢO ĐẢM AN NINH HỆ THỐNG MẠNG TẠI VIỆT NAM BẰNG PHƯƠNG PHÁP LÀM NGƯỢC

0 Người đánh giá. Xếp hạng trung bình 0

Tác giả:

Ngôn ngữ: vie

Ký hiệu phân loại:

Thông tin xuất bản: Tạp chí Khoa học và Công nghệ - Đại học Thái Nguyên, 2020

Mô tả vật lý: tr.125-133

Bộ sưu tập: Báo, Tạp chí

ID: 303254

Thêm vào giỏ Liên kết toàn văn

Bài báo này trình bày kết quả đánh giá mức độ an toàn của hệ thống mạng dựa trên kỹ thuật làm ngược lại. Nghiên cứu đã thực hiện triển khai một số cuộc tấn công hệ thống mạng phổ biến, thường gặp như DDoS, SQL Injection, Reverse TCP để định lượng và đánh giá mức độ khả năng phòng thủ an ninh của hệ thống đó dựa trên thực nghiệm mô phỏng. Thông qua việc phân tích các mối đe dọa và các thông số đo lường, nhóm tác giả nhận diện được mức độ an toàn và an ninh của hệ thống mạng. Ba kịch bản tấn công hệ thống mạng sử dụng phương pháp phát hiện xâm nhập kiểu hộp trắng (White Box) bao gồm: (a) tấn công máy chủ web từ bên trong mạng nội bộ, (b) tấn công từ bên ngoài với trường hợp mạng đã tích hợp tường lửa thế hệ cũ và (c) tấn công từ bên ngoài trong trường hợp tích hợp tường lửa thế hệ mới. Kết quả cho thấy với (a) mức độ bị tấn công gây kết quả rất nghiêm trọng (tê liệt máy chủ lên tới 95%)
với (b) tỉ lệ này đã giảm còn 63% và với (c) chỉ còn 19%. Kết quả này giúp nhà quản trị xây dựng giải pháp an toàn và an ninh mạng cho hệ thống của mình được tốt hơn để phòng tránh và hạn chế các mối đe dọa tấn công vào hệ thống.This paper presents the results of evaluating the security level of a network based on reverse engineering. A number of common network attacks, such as DDoS, SQL Injection, Reverse TCP were emulatedto quantify and evaluate the level of security defenses of the system based on simulation experiments. Through the threat analysis and security metrics, the level of safety and security of the network were indentified. Three scenarios for a network attack using White Box intrusion detection methods include: (a) attacking a web server from an internal network, (b) attacking from outside in the case of a built-in old firewall and (c) external attacking in the case of a new generation firewall. The results showed that (a) the severity of the attack caused serious results (server paralysis up to 95%)
(b) the server paralysis rate was decreased to 63%
and (c) the server paralysis rate was only 19%. The results are promising to help administrators to build better safety and security systems as well as to prevent and limit network connections and threatens attacking their systems.

1. Đọc trực tuyến

1. Đọc trực tuyến

Tạo bộ sưu tập với mã QR