The Building On The Safety System For Campus Network Of Heilongjiang Vocational College Of Animal Husbandry And Veterinary Science

This article has analyzed the safe menace which the computer network information is faced with, and has expatiated on the safe problems of the campus network's information, at the same time, has introduced the internal and external research results about the network informational safe , has analyzed that the campus network has been attacked by DdoS when it run steadily: the attack by ping of death,SYN, and Land, and has analyzed the attack principle and the preventable measure of DoS and DDoS. For the problems of preventing the campus network being attacked, this article has pointed out that prevention strategy based on firewall and ruter, to ensure the integrality and available of the campus network's information.On the base of above mentioned statement, combining with applying of the intrusion detection technology, taking network payload as the feature and Mahalanobis distance as algorithm, it can lower the false rate and improve the detection precision.The paper expatiated the attack theory of DoS . On different ways of attacking, using different ways of defending. Analyzed the attack theory of DDoS, and pointed out the defense measure.For protecting the safety of campus network communication,adopting the fairwall techonology, we can speparate the harmful invasion that the outside net makes to the inside net user's using outside net resources effectively. This paper designs the safty strategies based on the firewall that starts with planning network communication region and firewall tactics disposal respectively, for example, Topsec Network Bodyguard Firewall. and gives a typical application! That is,the firewall tactics disposal on campus network of Heilongjiang Vocational College of Animal Husbandry and Veterinary Science. The disposald of the CISCO3825 router is an example, it designes the safety tactics based on the Routing Table, and accomplishes the defence to the common attack means, and solves the checking form the outside IP's, inside address's embezzing and the checking of SYN's etc , to protect the routh from being attacked by the ware, and prevent the illegal visit from the key port.Above all, the paper does some research on the intrusion detection technology and prevention strategy for campus network. And I hope it will make a contribution to build an effective safety prevention strategy.