计算机网络概论

Size: px

Start display at page:

Download "计算机网络概论"

俦皮
5 years ago
Views:

2 IDS

3 1

8 1 SNMP Agent Manager Agent

10 SMI MIB SMI SNMP

12 Web SNMP SNMP Trap SNMP GetRequestGetNext GetBulk SetRequest Response Inform Trap

18 Buffer overflow DoS

19 Buffer Overflow Internet fingerd, sendmail, bind, IE, IIS, ftpd, lpd, X Window, ssh, NetMeeting

20 spoofing IP Spoofing ARP Spoofing DNS Spoofing Mail Spoofing

23 Basic concept of encryption and decryption

29 Basic principle asymmetry symmetry

30 DES 3DES

31 DES 3DES

32 DES 3DES Sub-key generating

33 Complex

34 RSA

35 RSA

36 RSA

37 RSA

38 RSA Encrypt with public key

39 RSA Encrypt with private key

40 Complex encryption Message digest by MD algorithm message integrity

41 Complex encryption Digest and RSA(sender) unidirectional data signature

42 Complex encryption Digest and RSA(sender) unidirectional data signature

43 Complex encryption Bidirectional Data Signature Authentication

44 Complex encryption Bidirectional Data Signature Authentication

45 ( )

48 NAT

55 WWW

56 DMZ WEB

57 -What GRID

58 -What Web dynamic

59 -Why

60 -Why CAD/CAM

61 -Why

62 -Why

63 -Why

64 -Why

65 -Why

66 Application Specialized services : services : services :, Talking to things : (Internet protocols) & Controlling things locally : Access to, & control of, resources Collective Application Resource Fabric Transport Internet Link Internet Protocol Architecture

67 SF Express EU-Data Grid U.S. GIG China Grid

70 -IDS Intrusion Detection IDS

71 -IDS IDS :Intrusion detection system. Some combination of one or more of the following components: sensor, analyzer, manager. by IDWG, RFC draft, draft-ietf-idwg-requirements,p8

72 -IDS

73 -IDS

74 -Firewall

75 -Firewall Firewall VS. IDS +

76 - Active Firewall => Active Firewall System What? A Protection System for small/medium organization, based on the integration and cooperation of the traditional security devices. Why? More dangerous world (threats: worm, attack, etc.) Single devices: not competent Components: Firewall, IDS, Scanner, and Policy Center

77 - Active Firewall

78 - Active Firewall Two Approaches Intelligence Goal: more intelligent in automatically detecting threat and responding Approach: Security Policy Center Performance Goal: faster, smooth in packet processing wire-speed! Approach: by Network Processor

79 - Active Firewall The Old Architecture IDS

80 - Active Firewall The New Architecture IDS

81 - Active Firewall The Info. Flow Execution

82 Active Firewall DMZ WEB

83 Today s Vision Everything is digital: voice, video, music, pictures Everything is on-line: bank statement, medical record, books, airline schedule, weather, highway traffic, toaster, refrigerator Everyone is connected: doctor, teacher, broker, mother, son, friends, enemies

84 Today s Vision Electronic commerce Internet entertainment World as a small village community organized according to interests enhanced understanding among diverse groups Electronic democracy little people can voice their opinions to the whole world bridge the gap between information haves and have no s Electronic terrorism hacker can bring the whole world to its knee

85 NEXT? TODAY!

86 IPV6 IPv4 IPv6 deficiency advantages

87 IPV6

88 IPV6

89 IPV6

90 IPV6

91 IPV6

92 IPV6

93 IPV6

94 IPV6

95 2006-5

96 2.2 bps vs. baud

97 ( )

98 2.2 cont d

99 2.2 cont d ( )

100 2.3. Modem Modem Codec Codec

101 2.4. Detection

102 2.4. cont d ( ) / (

103 2.4. Cont d

104 T mbps E mbps

105

106 3.1 ISO/OSI

107 3.2 ISO/OSI cont d

108 3.2 ISO/OSI cont d DL MAC

109 3.2 ISO/OSI cont d IP Best effort

110 3.2 ISO/OSI cont d (TSAP) End-End TCP/UDP Tcp udp

111 3.3 TCP/IP Application Presentation Session Transport 3 Network 2 1 Data Data link link Physical

112 3.3 TCP/IP Cont d

113 3.3 TCP/IP Cont d

114 3.3 TCP/IP Cont d

115 4.1 LAN Ethernet BUS CSMA/CD Token network BUS RING

116 5.1 wan ISDN ATM

117 6.1

118 7.1 (arp rarp) Arp rarp dns

119 8 Client server proxy Request reponse

120 8 cont d Challenge response

工程师培训

工程师培训 .1 TCP/IP TCP/IP 1 .2.2.1 Host 1960 S 1970 S Host Low Speed Lines 1970 S 1980 S pc Server Local Interneting 1980 S 1990 S Branch. pc Branch. WAN Branch. pc pc IBM SNA IBM X.25 2 .2.2 OSI OSI Application