电力企业PC终端主动防御技术的研究

发布时间：2018-06-21 02:58

本文选题：主动防御技术 + 数据包截获　；参考：《华北电力大学(北京)》2014年硕士论文

【摘要】：电力行业是国民经济发展的基础行业,在计算机技术迅猛发展势头的带动下,各大电力企业越来越重视企业内部的信息化建设,这极大的提高了电力企业的生产效率。然而,电力企业信息化建设在给企业带来巨大效益的同时,也面临着诸多威胁,尤其是企业的内网安全问题受到了广泛的关注。这一问题的产生很大一部分是因为企业不断发展壮大,涉及的生产领域和地域不断扩展,致使接入企业内网的PC终端数量激增,直接导致电力企业自身内网信息安全的漏洞和隐患越来越多。正因如此,针对电力PC终端的主动防御技术受到了电力企业的高度重视。这种技术从根本上监视系统调用,并判断其合法性,从而可以实时发现并拦截恶意攻击。本文对主动防御技术的研究现状进行分析,结合电力企业的特点,详细阐述电力企业PC终端主动防御技术的设计思路,着重研究并分析其中的关键技术。本文从NIPS和HIPS两方面进行设计,同时又强调文件的安全防护。通过这三层主动防御体系,大大提升了电力企业PC终端的安全性,也为内网安全打下坚实的基础。本文技术层面上通过运用HOOKING技术,截获内核中的系统调用,从根本上彻底对系统底层进行控制。本文设计了如下功能:网络封包检测、文件保护、驱动保护、进程保护、注册表保护、系统自身保护等。对电力企业具有一定的实践推广价值。
[Abstract]:Electric power industry is the basic industry of national economy development. Driven by the rapid development of computer technology, more and more large power enterprises attach importance to the information construction within the enterprise, which greatly improves the production efficiency of power enterprises. However, the construction of electric power enterprise informatization has brought great benefits to the enterprise, but it also faces many threats, especially the security of the intranet of the enterprise has been paid more and more attention. This problem arises in large part because of the continuous growth of enterprises, the continuous expansion of production fields and geographical areas, resulting in a sharp increase in the number of PC terminals connected to the enterprise's intranet. There are more and more vulnerabilities and hidden dangers in the information security of power enterprises. Therefore, the active defense technology for power PC terminals has been attached great importance to by electric power enterprises. This technique can detect and intercept malicious attacks in real time by fundamentally monitoring system calls and judging their legitimacy. In this paper, the research status of active defense technology is analyzed. Combining with the characteristics of electric power enterprises, the design idea of PC terminal active defense technology in electric power enterprises is expounded in detail, and the key technologies are emphatically studied and analyzed. In this paper, NIPS and hips are designed, and the security protection of files is emphasized at the same time. Through the three-layer active defense system, the security of PC terminal in electric power enterprise is greatly improved, and a solid foundation for the security of intranet is also laid. At the technical level, this paper intercepts the system calls in the kernel by using hooking technology, and controls the bottom layer of the system thoroughly. This paper designs the following functions: network packet detection, file protection, driver protection, process protection, registry protection, system protection and so on. It has certain practical value to the electric power enterprise.
【学位授予单位】：华北电力大学(北京)
【学位级别】：硕士
【学位授予年份】：2014
【分类号】：TP393.08

【相似文献】