Design and analysis of firewall-penetrated scheme based on trusted host

doi:1005-8885 (2007) 01-0039-06

Acta Metallurgica Sinica(English letters) ›› 2007, Vol. 14 ›› Issue (1): 39-44.doi: 1005-8885 (2007) 01-0039-06

• Artificial Intelligence • 上一篇下一篇

Design and analysis of firewall-penetrated scheme based on trusted host

ZHANG Deng-yin, WANG Qian-qian, XU Jian

Computer Institute, Nanjing University of Posts and Telecommunications, Nanjing 210003, China

收稿日期:2006-10-12 修回日期:1900-01-01 出版日期:2007-03-30
通讯作者: ZHANG Deng-yin

Design and analysis of firewall-penetrated scheme based on trusted host

ZHANG Deng-yin, WANG Qian-qian, XU Jian

Computer Institute, Nanjing University of Posts and Telecommunications, Nanjing 210003, China

Received:2006-10-12 Revised:1900-01-01 Online:2007-03-30
Contact: ZHANG Deng-yin

摘要/Abstract

摘要：

On the basis of various firewall-penetrated technologies, a novel firewall-penetrated technology based on trusted host, which can realize the communication between penetrating host and protected host, is proposed in this paper. Meanwhile, the firewall-penetrated evaluating model and its formalized statement is also proposed by quantizing penetrated level, penetrated quality, and penetrated hiding. Finally, the firewall-penetrated technology based on trusted host is analyzed under the firewall-penetrated evaluating model, and the experimental results show that this technology has obvious penetrating effect and high penetrating quality.

关键词:

firewall-penetrated,;trusted;host;(TH),;penetrated;host,;penetrated;evaluating;model

Abstract:

Key words:

firewall-penetrated;trusted host (TH);penetrated host;penetrated evaluating model

中图分类号:

TN393.01

ZHANG Deng-yin, WANG Qian-qian, XU Jian. Design and analysis of firewall-penetrated scheme based on trusted host[J]. Acta Metallurgica Sinica(English letters), 2007, 14(1): 39-44.

参考文献

1. Lu Hui-qin, Zhang Hong, Luo Shou-shan, et al. Denial of service in non-buffer systems. Journal of Beijing University of Posts and Telecommunications, 2003, 26(3): 61-65 (in Chinese)

2. Zhang Wei-bin, Zhang De-yun, Liu Wei-na, et al. Research on protecting against SYN flooding on a firewall. The Journal of China University of Posts and Telecommunications, 2003, 10 (4): 95-100

3. Henry Y X, Lee C J. A source address filtering firewall to defend against denial of service attacks. Proceedings of IEEE 60th Vehicular Technology Conference: Vol 5, Sep 26-29, 2004, Los Angeles, CA, USA. Piscataway, NJ, USA: IEEE, 2004: 3296-3300

4. V Santiraveewan, Y Permpoontanalarp. A graph-based methodology for analyzing IP spoofing attack. Proceedings of 18th International Conference on Advanced Information Networking and Applications: Vol 2, Mar 29-31, 2004, Fukuoka Japan. Piscataway, NJ, USA: IEEE Computer Society, 2004: 227-230

5. Subramanya S R, Lakshminarasimhan N. Computer viruses. Potentials IEEE, 2001, 20(4): 16-19

6. InSeon Yoo, Ulrich Ultes-Nitsche. An intelligent firewall to detect novel attacks. Proceedings of Conference on Korean Science and Engineering Association in UK, Jan 22, 2002, Surrey, Korean(KSEAUK). 2002

7. httptunnel. [2005-10-23]. http://www.nocrew.org/software/httptunnel. html

8. Fyodor. Namp Security. [2005-09-15]. http://www.insecure.org/nmap/ index.html

9. Chris McNab. Network security assessment: know your network. [2006-02-07]. http://www.oreilly.com/catalog/networksa/chapter/ ch04.pdf

10. Gouda M G, Liu X Y A. Firewall Design: Consistency, Completeness, and Compactness. Proceeding of 24th International Conference on Distributed Computing Systems, Mar 24 X Y A 26, 2004, Tokyo, Japan. Piscataway, NJ, USA: IEEE, 2004: 320-327

11. Loose Source Routing. [2006-01-23]. http://www.synacklabs.net/ OOB/ LSR.html

12. Comer D E, Stevens D L. Internetworking with TCP/IP: Vol 2. Upper Saddle River, NJ, USA: Prentice Hall, 2000

13. Getting started with hping3. [2006-02-26]. http://wiki.hping.org/94

14. Comer D E, Stevens D L. Internetworking with TCP/IP: Vol 1. Upper Saddle River, NJ, USA: Prentice Hall, 1998

15. Lyu M R, Lau L K Y. Firewall security: policies, testing and performance evaluation. Proceeding of 24th Computer Software and Applications Conference(COMPSAC 2000), Oct 25 D L 27, 2000. Taibei, China. Los Alamitos, CA, USA: IEEE Computer Society, 2000: 116-121

[1]	商玉洁张乐友高小旭. Continual auxiliary leakage-resilient attribute-based broadcast encryption with constant size ciphertexts [J]. 中国邮电高校学报(英文版), 2020, 27(4): 69-82.
[2]	杨亚涛张卷美黄洁润张亚泽. Improved authenticated key agreement protocol based on Bi-ISIS problem[J]. 中国邮电高校学报(英文版), 2020, 27(3): 93-102.
[3]	Zhao Guosheng, Liao Yuting, Wang Jian. Dynamic trust evaluation model for task participants oriented to mobile crowd sensing[J]. 中国邮电高校学报(英文版), 2020, 27(2): 26-36.
[4]	Tang Xianlun, Chen Yingjie, Xu Jin, Yu Xinxian. Deep global-attention based convolutional network with dense connections for text classification[J]. 中国邮电高校学报(英文版), 2020, 27(2): 46-55.
[5]	金亮曹小鹏. Multi-granularities capture interaction information for text matching accuracy enhancement[J]. 中国邮电高校学报(英文版), 2020, 27(1): 100-108.
[6]	梁晓林曹旺斌. Broadband hybrid model for relay-aided cooperative MIMO power line communication systems[J]. 中国邮电高校学报(英文版), 2020, 27(1): 72-80.
[7]	Wang Huan, Liu Ting, Cao Yuning, Wu Aixiang. Underflow concentration prediction model of deep-cone thickener based on data-driven[J]. 中国邮电高校学报(英文版), 2019, 26(6): 63-72.
[8]	Tian Zengshan, Ren Haoliang,Zhou Mu. Adaptive access points deployment for Indoor bluetooth positioning accuracy enhancement[J]. 中国邮电高校学报(英文版), 2019, 26(5): 82-93.
[9]	Gao Miao, Yu Zhiguo, Li Qingqing, Wei Jinghe, Gu Xiaofeng. Improved ECG signal compression method for E-healthcare[J]. 中国邮电高校学报(英文版), 2019, 26(4): 62-69.
[10]	Tang Yongli, Wang Mingming, Ye Qing, Qin Panke, Zhao Zongqu. Lattice-based hierarchical identity-based broadcast encryption scheme in the standard model[J]. 中国邮电高校学报(英文版), 2019, 26(4): 70-79.
[11]	Shi Zhiming, Huang Chengti. Quality of experience models for network video quality[J]. 中国邮电高校学报(英文版), 2019, 26(4): 80-88.
[12]	宋成张明月彭维平. Efficient pairing-based batch anonymous authentication scheme for VANET[J]. 中国邮电高校学报(英文版), 2018, 25(1): 85-94.
[13]	Hu Zhiqun, Lu Zhaoming, Lin Shangjuan, Wen Xiangming, Xu Hen. Performance analysis of LTE-U coexistence network with WiFi using queueing model[J]. 中国邮电高校学报(英文版), 2017, 24(5): 1-7.
[14]	肖朔晨宁连举庄文英. Study of matching model between tariff package and user behavior[J]. 中国邮电高校学报(英文版), 2017, 24(3): 91-96.
[15]	高洪波 Xie Guotao Liu Hongzhe 张新钰李德毅. Lateral control of autonomous vehicles based on learning driver behavior via cloud model[J]. 中国邮电高校学报(英文版), 2017, 24(2): 10-17.

Design and analysis of firewall-penetrated scheme based on trusted host

Design and analysis of firewall-penetrated scheme based on trusted host

PDF

可视化

被引次数

摘要/Abstract

引用本文

使用本文

参考文献

相关文章 15

编辑推荐

Metrics

本文评价