摘要
通过对接入和访问内网的各用户和终端主机身份认证,进而对主机用户进行授权与限制,确保内部网络的安全性。该文首先提出基于Agent的认证系统,然后着重从技术上探讨了认证Agent的具体实现细节,即利用Hook系统核心函数的方法来实现客户端认证Agent软件。这是一种工作于内核模式下的类软件防火墙技术,实现效率高、安装容易、运行稳定。
It guarantees the security of the internal network with the authentication to the users and the hosts by authorization and restriction. This paper proposes the agent-based authentication system firstly, then mainly discusses the implement details technically; which uses the Hook system kernel functions to realize the client authentication agent. This technology works in the kernel mode also known as personal firework, which is efficient implement, easy installation, and steady operation.
出处
《计算机安全》
2008年第4期8-11,共4页
Network & Computer Security
基金
中国三峡总公司科研基金
部委预研基金资助项目
关键词
认证
智能体
挂钩
authentication
Agent
Hook
