°ä²¼¹¦·ò£º2009-09-17
ÎªÊ²Ã´ÒªÍÆ³öIDSÓëGSNÁª¶¯¹æ»®?
µ±ÐÅÏ¢»¯ÔÚ¸÷¸öÐÐÒµÖÐ¿í·ºÀûÓò¢´øÀ´ÏÔÖøÐ§ÒæµÄͬʱ£¬ÐÅÏ¢°²È«³ÉΪĿǰ»ð¼±±ØÒª½â¾öµÄÎÊÌ⣬ÓÉ´ËÈëÇÖÐÐΪµÄ·¢¾õ¼¼ÊõºÍÀûÓÃÂýÂý±»ÈËÃÇËùÆ÷³Á¡£IDS (Intrusion Detection System) ÈëÇÖ¼ì²âϵͳ¾ÍÊÇÓÃÀ´Í¨¹ý´ÓÍÆËã»úÍøÂç»òÍÆËã»úϵͳµÄ¹Ø¼üµãÍøÂçÐÅÏ¢²¢½øÐзÖÎö£¬´ÓÖз¢ÏÖÍøÂç»òϵͳÖÐÊÇ·ñÓÐÎ¥·´°²È«Õ½ÊõµÄÐÐΪºÍ±»¹¥»÷µÄ¼£Ïó¡£
GA»Æ½ð¼×ÍøÂçGSN£¨Global Security Network£©È«¾Ö°²È«ÍøÂç½â¾ö¹æ»®£¬ÖÂÁ¦ÓÚͨ¹ýÈíÓ²¼þÁª¶¯¡¢ÍÆËã»úÓëÍøÂçÁª¶¯µÄÕûÌå½â¾ö¹æ»®£¬Í¨¹ýÍøÂçÉ豸ºÍ°²È«É豸µÅײ¼þ£¬¹²Í¬ºó¶Üϵͳ¡¢¿Í»§¶ËµÈÈí¼þ£¬Áª¶¯µÄʵÏÖÁ˶ÔÓÚÓû§Éí·Ý¡¢Ö÷»ú½¡È«ÐÔÒÔ¼°ÍøÂçͨѶµÈ¶à·½ÃæµÄ±£ÏÕ¡£
ÈçÉÏËùÊö£¬IDSÉ豸Äܹ»¼à¿ØÍøÂçÖÐÁ÷Á¿µÄÇé¿ö£¬²¢Õë¶ÔÒì³£µÄÁ÷Á¿ÌáÒéÔ¤¾¯£¬Ô¤¾¯ÐÅÏ¢Ô̺¬Ô´¡¢Ö÷ÕÅIP¡£µ«ÕâЩÐÅÏ¢¶ÔÓÚÍøÂçÖÎÀíÈËÔ±´¦Öð²È«ÊÂÎñÀ´Ëµ£¬²¢Ã»ÓÐÌ«´óµÄÒâ˼¡£ÕâÊÇÓÉÓÚ£¬Òª´¦ÖÃÍøÂ簲ȫÊÂÎñ£¬¿Ï¶¨Òª×·¸ùËÝÔ´£¬ÕÒµ½ÎÊÌâµÄ±¾Ô£¬ÉõÖÁ¶¨Î»µ½ÈË£¬·½Äܳ¹µ×½â¾ö£¬¶ø½ö½öÌṩIPµØÖ·ÕâÊDz»¹»µÄ¡£IDSÓëGSNϵͳµÄ½áºÏ£¬¸ÕºÃ½â¾öÁËÕâ¸öÎÊÌ⣬ͨ¹ý¶ÔIDSÉϱ¨µÄ°²È«ÊÂÎñµÄ½âÎö£¬²¢Í¨¹ýGSNϵͳÖÐÿ¸öÓû§µÄÐÅÏ¢À´½«°²È«ÊÂÎñ¶¨Î»µ½ÈË£¬²¢Æ¾¾ÝIDSÓëGSN¹²ÏíµÄÊÂÎñ¿â£¬¶Ô°²È«ÊÂÎñ¸ø³ö½¨ÒéµÄ´¦Öò½Ö裬»òÕßÄܹ»Í¨¹ýÔ¤Ïȶ¨ÔìºÃµÄÕ½ÊõÀ´¶Ô°²È«ÊÂÎñ½øÐÐ×Ô¶¯µÄ´¦Öã¬Õâ¾Í½â¾öÁËÔÚIDS¼ì²âµ½°²È«ÊÂÎñºó£¬´¦ÖÃÄѵÄÎÊÌâ¡£
IDSÓëGSNÁª¶¯¹æ»®µÄʵÏÖ˼·
ͨ¹ýÒÔÉ϶ÔÓÚIDSÓëGSNÁª¶¯µÄ·ÖÎö£¬ÎÒÃÇÄܹ»µÃ³öIDSÁª¶¯µÄʵÏÖ˼·£º
1 ÓÉIDS¼à¿ØÍøÂçÁ÷Á¿£¬²¢¶ÔÍøÂçÒì³£Á÷Á¿½øÐÐÉϱ¨µ½GSNϵͳ£¬Éϱ¨ÐÅÏ¢Ô̺¬¹¥»÷µÄÀàÐÍ£»Ô´¡¢Ö÷ÕÅIPµØÖ·µÈ¸ù»ùÐÅÏ¢
2 ÓÉGSNϵͳ¶ÔÊÕµ½µÄ°²È«ÊÂÎñ»ã±¨½øÐзÖÎö£¬²¢Æ¾¾ÝϵͳÖеÄÓû§Éí·ÝÐÅÏ¢½«¹¥»÷Õߺͱ»¹¥»÷Õß¶¨Î»µ½ÈË
3 ÓÉGSNϵͳƾ¾Ý°²È«Õ½Êõ¶Ô¹¥»÷Õß»ò±»¹¥»÷Õß½øÐд¦Öá£
ΪÁËʵÏÖGSNϵͳÓëIDSµÄÁª¶¯£¬±ØÒª²¿ÊðÒÔÏÂGSNµÄ×é¼þ£º
RG-SMP GA»Æ½ð¼×°²È«ÖÎÀíÆ½Ì¨£ºÕƹܶÔÈ«ÍøÉí·ÝÈÏÖ¤Ö´ÐÐͳһµÄ°²È«Õ½ÊõºÍÈÕÖ¾»ã×Ü·ÖÎöRG-SEP GA»Æ½ð¼×°²È«ÊÂÎñ½âÎöÆ÷£º¶ÔIDS»ã±¨µÄ°²È«ÊÂÎñ½øÐлã×ÜÉÏÉϱ¨SMP½øÐд¦ÖÃ
Áª¶¯ÊµÏÖÁ÷³ÌÈçÏÂͼËùʾ£º£º

¹æ»®Äѵ㣺ÈôºÎƽºâ“Î󱨔ºÍ“©±¨”£¿
GA»Æ½ð¼×ÍøÂçGSNÓëIDSÁª¶¯¹æ»®ÍƳöºó¿í·ºÀûÓÃÓÚ¸÷ÐÐÒµ¿Í»§£¬Êܵ½Óû§ºÃÆÀ¡£Í¬Ê±²»º±Óû§Ò²·×·×·´À¡ÔÚʹÓÃÖÐÓöµ½µÄÊ×ÒªÎÊÌ⣺ÈôºÎ“¼ÈÔ¤·À©±¨£¬ÓÖÏ÷¼õÎ󱨔£¿
¶àËùÖÜÖª£¬IDSÉϱ¨µÄÊÂÎñÖÖÀà·±¶à£¬Í¨³£Óû§¶Ìȱרҵ֪ʶ£¬ÄÑÒÔ´¦Öã¬ÈôÊǶÔÊÂÎñ²»¼Ó·ÖÎöµÄÉϱ¨GSN½øÐд¦Ö㬽«³öÏÖ´óÁ¿“Î󱨔£¬µ¼ÖÂÔËάÎÞ·¨·¢Õ¹¡£µ«ÊÇÈôÊÇֻƾ¾ÝÑϳÁ¼¶±ðÉϱ¨¹¥»÷£¬Ôò¿ÉÄܳöÏÖ©±¨£¬¶øÒ»µ©³öÏÖ©±¨Ò²¸øÍøÂ簲ȫ´øÀ´¼«´óÒþ»¼¡£
ÒÔͨ¹ýÓʼþºÍP2P´«²¼µÄ¾µä¸´ºÏÐͲ¡¶¾MydoomΪÀý£¬¸Ã²¡¶¾ÓµÓÐ3¸öÌØµã£º
1 Âú×ã¿ÉÄÜʹÓõĶ˿Úlistʱ
2 ÔÚ¶Ë¿ÚǰÌáÂú×ãʱ£¬´«ÊäÊý¾ÝÔ̺¬Ìصã×Ö·û“\x85\x13\x3c\x9e\xa2”
3 ÔÚ“2”µÄ»ù´¡ÉÏ£¬¶Ë¿ÚÊÇʱʱʹÓõģ¨3126µ½3199Ö®¼ä£©Çé¿ö
ÆäÖй涨1½öÅжϱ¨ÎĵÄÖ÷ÕŶ˿ÚÊÇ·ñÔÚÖ¸¶¨ÁìÓòÄÚ£¬ÕâÌõÎÄÔòÊǺÜÈÝÒ×±»ÆäËüÍøÂçÐÐΪ£¨Èç¿É×ÔÐÐËæ»úÉèÖö˿ڵÄP2PÈí¼þµÈ£©´¥·¢£¬ÈôÊǾݴ˸澯£¬½«Ê¹Óû§±»º£Á¿ÊÂÎñ¸²Ã»¡£µ«ÊÇÈôÊǶÔÂú×ã¹æ¶¨1µÄÊÂÎñÊÓ¶ø²»¼û£¬ÓÖ¿ÉÄܵ¼Ö©±¨£¬³ö¸ñÊǶÔÓÚÅú¸ÄÌØµã×Ö·ûµÄÁãÈÕ¹¥»÷ÊøÊÖÎ޲ߡ£
ÈôºÎÔÚÎ󱨺Í©±¨Ö®¼äÕÒµ½ºÏÀíµÄƽºâµã³ÉΪҵ½çÆÕ±éÎÞ·¨ÆÆ½âµÄÄÑÌ⣬ֱ½ÓÓ°Ïì¹æ»®µÄ¿ÉÓÃÐÔ
“¿ÉÐŶȔ»úÔì½â¾ö֮·
Ϊ½â¾öÉÏÎÄÖÐÌáµ½µÄÎÊÌ⣬GA»Æ½ð¼×´´ÐÂÐÔµÄÒýÈë“¿ÉÐŶȔÆÀ¹À»úÔ죬±¨¾¯ÖÐÌṩÏàÓ¦¿ÉÐŶÈÊýÖµ£¬·½±ãÓû§ÆÀ¹À¹¥»÷µÄÓÐЧÐÔ¡¢ÕæÊµÐÔ¡£ÈÔÒÔMydoomµÄ3¸öÌØµãΪÀý£º
1 µ±¼à²âµ½¿ÉÄܱ»ÀûÓõĶ˿Úʱ£¬ÏµÍ³»áÌìÉú¿ÉÐŶȽϵ͵ijõ²½¸æ¾¯¡£
2 ÈôÔÚ´Ë»ù´¡ÉÏ£¬½øÒ»²½¼ì²âµ½´«ÊäÊý¾ÝÖÐÔ̺¬Ìض¨¶ñÒâÌØµã×Ö·û£¬Ôò¸æ¾¯¿ÉÐŶȽ«ÏÔÖøÌáÉý¡£
3 µ±ÉÏÊöǰÌá¾ùÂú×㣬ÇÒ¹¥»÷ÐÐΪ²úÉúÔÚ¸ßÆÂ·ûÓõĶ˿ÚÁìÓòÄÚʱ£¬ÏµÍ³½«Åж¨¸Ã¸æ¾¯ÓµÓм«¸ßµÄ¿ÉÐŶȣ¬½¨ÒéÓÅÏÈ´ëÖá£
RG-IDSÔÚÏòGSNƽ̨·¢ËͰ²È«ÊÂÎñͬʱ³ý´«µÝ¹¥»÷ÀàÐÍ¡¢ÑϳÁ¼¶±ð¡¢¹¥»÷Ô´IP¡¢Ö÷ÕÅIPµÈ»ù´¡ÐÅÏ¢±í£¬»¹Ô̺¬¿ÉÐŶȡ£GSNϵͳƾ¾Ýר¼Ò֪ʶ¿âÔ¤Ô¼Ò广¶¨£¬È·¶¨µ±ÑϳÁ¼¶±ðºÍ¿ÉÐŶȴﵽij¸ö·§ÖµÊ±Ïò¿Í»§·¢Ë͸澯¡£Èç¶ÔÓÚMydoom¹¥»÷£¬µ±Í¬Ê±Âú×ã¹æ¶¨1¡¢2£¬¿ÉÐŶȴﵽ75%ʱ£¬·½ÏòÓû§·¢Ë͸澯£¬Áª¶¯´¦Öã»¶ÔÓÚÖ»Âú×ã¹æ¶¨1£¬¿ÉÐŶÈΪ50%µÄÊÂÎñ£¬Ôò±£ÁôÆðÀ´£¬¹©Óû§ÔÚ½â¾öÍ괹ΣÊÂÎñºó²é¿´´¦Öá£Í¨¹ýÕâÖÖ·½Ê½£¬Ê¹µÃÓû§´Ó´óÁ¿µÄP2PÀûÓÃÕ¼ÓÃMydoom¹¥»÷¶Ë¿ÚÒýÆðµÄ“Î󱨔Öнâ·Å³öÀ´£¬´ó´ó¼ò»¯ÁËÔËά¡£
ÒýÈë“¿ÉÐŶȔ»úÔ죬ÓÐЧ½â¾öÁË“Î󱨔ºÍ“©±¨”µÄƽºâÎÊÌ⣬Ìá¸ßÁËIDSÓëGSNÁª¶¯¹æ»®µÄ¿ÉÓÃÐÔ¡£“¿ÉÐŶȔÊÇGA»Æ½ð¼×ÍøÂçÉî¿Ì×êÑпͻ§ÒµÎñ½ü¿ö£¬°ÑÎÕ¿Í»§ÀûÓÃÐèÒªµÄÓÖÒ»Ïî¼¼Êõ´´Ð£¬½øÒ»²½ÃÀÂúGSNÈ«¾Ö°²È«ÍøÂç½â¾ö¹æ»®£¬»îÆÃÌåÏÖÁËGA»Æ½ð¼×ÍøÂ簲ȫ²úÆ·Ïß“Èð²È«±äµÄ¸üÈÝÒ×”µÄ¼ÛÖµÖ÷ÕÅ¡£
