摘要
随着国内外网络信息技术的发展和普及,网络安全问题逐步增多。外部恶意IP地址在未授权情况下进行各种恶意行为,如DDoS、安全漏洞、数据窃取、勒索病毒、木马后门攻击等,导致数据泄露、服务不可用等安全问题频发。基于此,自动化封禁IP地址技术应运而生,可以快速封禁外部发起的恶意攻击IP地址,及时阻止攻击者的进一步网络攻击行为,有效提升网络安全性能。文章通过介绍基于网络攻击告警的IP地址自动化封禁技术的实现原理和实际运营场景,验证了该技术的可行性和在网络安全防御方面的实用价值。
With the development and popularization of network information technology both domestically and internationally,network security issues are gradually increasing.External malicious IP addresses engage in various malicious behaviors without authorization,such as DDoS,security vulnerabilities,data theft,ransomware,Trojan backdoor attacks,etc.,resulting in frequent security issues such as data leakage and service unavailability.Based on this,automated IP address blocking technology has emerged,which can quickly block malicious attack IP addresses initiated by external parties,timely prevent further network attack behaviors of attackers,and effectively improve network security performance.The article introduces the implementation principle and practical operation scenarios of IP address automatic blocking technology based on network attack alarm,and verifies the feasibility and practical value of this technology in network security defense.
作者
张文迪
高先志
雷泽坤
孙源
席萌
ZHANG Wendi;GAO Xianzhi;LEI Zekun;SUN Yuan;XI Meng(Aostar Information Technologies Co.,Ltd.,Chengdu 610041,China)
出处
《计算机应用文摘》
2024年第12期50-52,共3页
Chinese Journal of Computer Application
关键词
网络安全
告警
IP地址
network security
alarm
IP address