Design and analysis of firewall-penetrated scheme based on trusted host

doi:1005-8885 (2007) 01-0039-06

中国邮电高校学报(英文) ›› 2007, Vol. 14 ›› Issue (1): 39-44.doi: 1005-8885 (2007) 01-0039-06

• Artificial Intelligence • 上一篇下一篇

Design and analysis of firewall-penetrated scheme based on trusted host

ZHANG Deng-yin, WANG Qian-qian, XU Jian

Computer Institute, Nanjing University of Posts and Telecommunications, Nanjing 210003, China

收稿日期:2006-10-12 修回日期:1900-01-01 出版日期:2007-03-30
通讯作者: ZHANG Deng-yin

Design and analysis of firewall-penetrated scheme based on trusted host

ZHANG Deng-yin, WANG Qian-qian, XU Jian

Computer Institute, Nanjing University of Posts and Telecommunications, Nanjing 210003, China

Received:2006-10-12 Revised:1900-01-01 Online:2007-03-30
Contact: ZHANG Deng-yin

摘要/Abstract

摘要：

On the basis of various firewall-penetrated technologies, a novel firewall-penetrated technology based on trusted host, which can realize the communication between penetrating host and protected host, is proposed in this paper. Meanwhile, the firewall-penetrated evaluating model and its formalized statement is also proposed by quantizing penetrated level, penetrated quality, and penetrated hiding. Finally, the firewall-penetrated technology based on trusted host is analyzed under the firewall-penetrated evaluating model, and the experimental results show that this technology has obvious penetrating effect and high penetrating quality.

关键词:

firewall-penetrated,;trusted;host;(TH),;penetrated;host,;penetrated;evaluating;model

Abstract:

Key words:

firewall-penetrated;trusted host (TH);penetrated host;penetrated evaluating model

中图分类号:

TN393.01

ZHANG Deng-yin, WANG Qian-qian, XU Jian. Design and analysis of firewall-penetrated scheme based on trusted host[J]. Acta Metallurgica Sinica(English letters), 2007, 14(1): 39-44.

参考文献

1. Lu Hui-qin, Zhang Hong, Luo Shou-shan, et al. Denial of service in non-buffer systems. Journal of Beijing University of Posts and Telecommunications, 2003, 26(3): 61-65 (in Chinese)

2. Zhang Wei-bin, Zhang De-yun, Liu Wei-na, et al. Research on protecting against SYN flooding on a firewall. The Journal of China University of Posts and Telecommunications, 2003, 10 (4): 95-100

3. Henry Y X, Lee C J. A source address filtering firewall to defend against denial of service attacks. Proceedings of IEEE 60th Vehicular Technology Conference: Vol 5, Sep 26-29, 2004, Los Angeles, CA, USA. Piscataway, NJ, USA: IEEE, 2004: 3296-3300

4. V Santiraveewan, Y Permpoontanalarp. A graph-based methodology for analyzing IP spoofing attack. Proceedings of 18th International Conference on Advanced Information Networking and Applications: Vol 2, Mar 29-31, 2004, Fukuoka Japan. Piscataway, NJ, USA: IEEE Computer Society, 2004: 227-230

5. Subramanya S R, Lakshminarasimhan N. Computer viruses. Potentials IEEE, 2001, 20(4): 16-19

6. InSeon Yoo, Ulrich Ultes-Nitsche. An intelligent firewall to detect novel attacks. Proceedings of Conference on Korean Science and Engineering Association in UK, Jan 22, 2002, Surrey, Korean(KSEAUK). 2002

7. httptunnel. [2005-10-23]. http://www.nocrew.org/software/httptunnel. html

8. Fyodor. Namp Security. [2005-09-15]. http://www.insecure.org/nmap/ index.html

9. Chris McNab. Network security assessment: know your network. [2006-02-07]. http://www.oreilly.com/catalog/networksa/chapter/ ch04.pdf

10. Gouda M G, Liu X Y A. Firewall Design: Consistency, Completeness, and Compactness. Proceeding of 24th International Conference on Distributed Computing Systems, Mar 24 X Y A 26, 2004, Tokyo, Japan. Piscataway, NJ, USA: IEEE, 2004: 320-327

11. Loose Source Routing. [2006-01-23]. http://www.synacklabs.net/ OOB/ LSR.html

12. Comer D E, Stevens D L. Internetworking with TCP/IP: Vol 2. Upper Saddle River, NJ, USA: Prentice Hall, 2000

13. Getting started with hping3. [2006-02-26]. http://wiki.hping.org/94

14. Comer D E, Stevens D L. Internetworking with TCP/IP: Vol 1. Upper Saddle River, NJ, USA: Prentice Hall, 1998

15. Lyu M R, Lau L K Y. Firewall security: policies, testing and performance evaluation. Proceeding of 24th Computer Software and Applications Conference(COMPSAC 2000), Oct 25 D L 27, 2000. Taibei, China. Los Alamitos, CA, USA: IEEE Computer Society, 2000: 116-121

[1]	梁晓林, 马佳旭, 曹旺斌, 徐建鹏, 刘帅奇, 赵雄文 . Characteristics and modeling of UAV-vehicle MIMO wideband channels [J]. 中国邮电高校学报(英文版), 2023, 30(6): 60-67.
[2]	梁晓林, 戎展毅, 曹旺斌, 刘帅奇, 赵雄文. Performance analysis of different coding schemes for wideband vehicle-to-vehicle MIMO systems [J]. 中国邮电高校学报(英文版), 2023, 30(6): 89-98.
[3]	晁浩连卫芳刘永利. Spatiotemporal emotion recognition based on 3D time-frequency domain feature matrix[J]. 中国邮电高校学报(英文版), 2022, 29(5): 62-72.
[4]	Wang Jian, Qiao Kuoyuan, Yuan Yanlei, Liu Xiaole, Yang Jian. Adaptive learning path recommendation model for examination-oriented education[J]. 中国邮电高校学报(英文版), 2022, 29(4): 77-88.
[5]	Zhang Ping, Xu Xiaodong, Dong Chen, Han Shujun, Wang Bizhu. Intellicise communication system: model-driven semantic communications[J]. 中国邮电高校学报(英文版), 2022, 29(1): 2-12.
[6]	Sun Heng, Qiao Xiuquan. Augmented reality-based BIM multi-user collaboration system[J]. 中国邮电高校学报(英文版), 2022, 29(1): 71-80.
[7]	顾亦然周鹏杨海根. News recommendation based on time factor and word embedding [J]. 中国邮电高校学报(英文版), 2021, 28(5): 82-90.
[8]	杨帆, 姜梦雅, . Exo-LSTM: traffic flow prediction based on multifractal wavelet theory [J]. 中国邮电高校学报(英文版), 2021, 28(5): 102-110.
[9]	Wang Xianlun, Sun Yuxuan, Wang Dong, Hu Xiaowei. Research on error compensation of robot based on multi-hole measurement technology and particle swarm optimization[J]. 中国邮电高校学报(英文版), 2021, 28(4): 88-96.
[10]	杜绪伟陈东刘华江马兆昆杨倩倩. Real-time hand tracking based on YOLOv4 model and Kalman filter[J]. 中国邮电高校学报(英文版), 2021, 28(3): 86-94.
[11]	敦书波金秋延毕凌宇王紫任谢军. Behavior modeling on the PIM performance in connectors using FEA method and circuit simulation [J]. 中国邮电高校学报(英文版), 2021, 28(1): 87-93.
[12]	商玉洁张乐友高小旭. Continual auxiliary leakage-resilient attribute-based broadcast encryption with constant size ciphertexts [J]. 中国邮电高校学报(英文版), 2020, 27(4): 69-82.
[13]	杨亚涛张卷美黄洁润张亚泽. Improved authenticated key agreement protocol based on Bi-ISIS problem[J]. 中国邮电高校学报(英文版), 2020, 27(3): 93-102.
[14]	Zhao Guosheng, Liao Yuting, Wang Jian. Dynamic trust evaluation model for task participants oriented to mobile crowd sensing[J]. 中国邮电高校学报(英文版), 2020, 27(2): 26-36.
[15]	Tang Xianlun, Chen Yingjie, Xu Jin, Yu Xinxian. Deep global-attention based convolutional network with dense connections for text classification[J]. 中国邮电高校学报(英文版), 2020, 27(2): 46-55.

Design and analysis of firewall-penetrated scheme based on trusted host

Design and analysis of firewall-penetrated scheme based on trusted host

PDF

可视化

被引次数

摘要/Abstract

引用本文

使用本文

参考文献

相关文章 15

编辑推荐

Metrics

本文评价