论文部分内容阅读
对通过Internet作生意的公司,防火墙、特别是代理防火墙是保护公司应用软件不受犯侵的第一道防线。Trusted In-formation System公司想要证实防线的可靠性,它创建了叫做Gauntlet Internet的防火墙。制造商重新修改了其代理产品的Unix内核以防IP电子伪装欺骗。IP电子伪装是Inter-net不速之客闯入防火墙的一个常用伎俩。 下面介绍两种“防盗门”。Airtight加密技术可保证保密信息的加密和安全。Gauntlet还包括了Web和FTP服务器,使得公司可以在最安全的地方即防火墙上运行他们的应用程序。 但是,TIS的防火墙并非天衣无缝。他的Web服务器虽然每天能承受成千上万次的外来袭击,却不能胜任重负载业务。而且Gauntlet不支持一次签名验证机制(Single Sign-on
For companies that trade over the Internet, firewalls, and in particular proxy firewalls, are the first line of defense to protect corporate applications from infringement. Trusted In-formation System, Inc. To confirm the defensive line reliability, it created a firewall called the Gauntlet Internet. Manufacturers have reworked its proxy Unix kernel to prevent IP-based spoofing. IP electronic disguise is a common trick for Inter-net uninvited guests to break into the firewall. Here are two kinds of “security door.” Airtight encryption technology ensures the confidentiality of information encryption and security. Gauntlet also includes Web and FTP servers that allow companies to run their applications in the most secure places, firewalls. However, TIS firewall is not perfect. Although his Web server can withstand tens of thousands of attacks every day, but can not afford heavy-duty business. And Gauntlet does not support a single signature verification mechanism (Single Sign-on