radware產(chǎn)品培訓(xùn)ppt課件(編輯修改稿)
2025-04-17 22:03 本頁面
【文章內(nèi)容簡介】 病毒、 DoS） 都是通過 80 端口進行的 77%9%7%2%2%3%端口 8 0端口 1 39端口 4 45端口 1 35ICM P其它來源： Network World， 2022 年 8 月 Page 28 DefensePro 業(yè)界最快的 IPS， 可隔離 、 攔截 和 預(yù)防 攻擊，從而實現(xiàn)即時、高性能的應(yīng)用安全 DefensePro 簡介 Page 29 第一層防護 Users 路由器 服務(wù)器 交換機 LAN ? 數(shù)千兆位速度的應(yīng)用安全保護，可防范入侵、病毒和蠕蟲 ? 實時防范拒絕服務(wù)攻擊和攔截 Syn flood 攻擊 ? 協(xié)議異常性檢測 ? 全面監(jiān)視和隔離攻擊 ? 簡單的串聯(lián)式安裝 防火墻 DefensePro Page 30 企業(yè)應(yīng)用安全 Users 路由器 服務(wù)器 L2/3 交換機 第 1 層 第 2 層 第 3 層 DefensePro 實時保護所有的局域網(wǎng)單元和應(yīng)用 清理所有的入站 /出站流量 將攻擊隔離起來，防止影響分布式關(guān)鍵應(yīng)用 沒有修補上的管理 Page 31 Simple Security Configuration Connect Networks/Traffic Modular Security Services Page 32 Attack Logs Reports Page 33 Attack Reports Reports Page 34 實時安全雷達圖 Page 35 自動更新 Page 37 Adaptive Fuzzy Logic Decision Engine Attack area Suspect area Normal area Bytes/sec axis Protocol distribution[%] axis Attack Degree axis HIGH MEDIUM LOW Normal Adapted Area Page 38 WAN Blocking Rules RT statistics Fuzzy Logic Engine Learning Footprint Lookup Behavioral DoS System Modules Attack Characteristics ? Source/Destination IP ? Source/Destination Port ? Packet size ? Type of Service ? TTL (Time To Live) ? DNS Query ? DNS ID ? Packet ID ? More … (up to 17) Initial filter is generated: Packet ID Degree of Attack = Low (Positive Feedback) Filter Optimization: Packet ID AND Source IP Filter Optimization: Packet ID AND Source IP AND Packet size Degree of Attack = High (Negative k) Filter Optimization: Packet ID AND Source IP AND Packet size AND TTL Degree of Attack = High Degree of Attack = Low Narrowest filters ? Packet ID ? Source IP Address ? Packet size ? TTL (Time To Live) 1 2 3 4 5 Inbound Traffic Outbound Traffic Page 39 Fuzzy Decision Surface – Scenario 1 Rateinvariant anomaly axis Attack area Suspicious area Normal adapted area Attack Degree = 5 (Normal Suspect) Abnormal rate of Syn packets… Normal TCP flags distribution Legitimate masscrowd enter news site Ratebased anomaly axis Yaxis Xaxis Zaxis Attack Degree axis Page 40 Fuzzy Decision Surface – Scenario 2 Rate invariant anomaly weight axis Attack area Attack Degree axis Attack Degree = 10 (Attack) Abnormal rate of UDP packets/sec… Abnormal protocol distribution [UDP/total and UDP/ICMP unreachable] UDP Flood Ratebased anomaly weight axis Yaxis Xaxis Zaxis Page 41 管理 Page 42 APSolu
教學(xué)課件相關(guān)推薦
鄂ICP備17016276號-1