返回Google圖書搜尋

Self-securing Network Interfaces

其他書名	What, why and how
出版	Carnegie-mellon univ pittsburgh pa school of computer Science, 2002
URL	http://books.google.com.hk/books?id=IOGhSgAACAAJ&hl=&source=gbs_api

註釋Self-securing network interfaces (NIs) examine the packets that they move between network links and host software, looking for and potentially blocking malicious network activity. This paper describes self-securing network interfaces, their features, and examples of how these features allow administrators to more effectively spot and contain malicious network activity. The authors present a software architecture for self-securing NIs that separates scanning software into applications (called scanners) running on an NI kernel. The resulting scanner Application Programming Interface (API) simplifies the construction of scanning software and allows its powers to be contained even if it is subverted. They illustrate the architecture's potential via a prototype self-securing NI and two example scanners: one that identifies and blocks known e-mail viruses and one that identifies and inhibits rapidly propagating worms like Code Red.