Research On Network Attack And Defense Technology And The Design Of Enterprise Training Platform

Nowadays,network has become an important component of people's life,and network security has also become a key issue.The network is facing unprecedented challenges.Because of the relatively complex architecture of computer networks,hackers attack various forms of attacks against the network.Under the current background,there are many weak points in the current power industry's information network security management,which seriously affects and restricts the development of enterprise informatization.In this paper,the network security attack and defense technology research as the breakthrough point,in the increasingly severe environment of network security environment setting up an attack and defense training platform,for information security training to provide a strong support.The main research contents include:(1)Research on password theft and protection.By using the experimental operation of network sniffing for password theft,the working principle and process of the sniffer are deeply analyzed,and the disadvantages of the password in the network transmission are found,and the method of protecting the security of the password through MD5 is proposed,and the salt adding algorithm is further studied to reduce the rainbow table library.Probability.(2)SQL injection and prevention research.Through the analysis of the design vulnerability of the Web front end,the classical SQL injection method is studied by virtual machine experiment,and the relevant database information is obtained.On this basis,a variety of preventive measures for SQL injection attack are put forward,and the practicability of each defense method is analyzed one by one,and the security of the database access is improved.(3)Research on platform design.Through the investigation and analysis of network security under the new situation,the existing network security learning model can not adapt to the increasingly severe security problems.We propose how to establish a comprehensive platform combining learning and training to cope with the current network security situation.The topology planning and function design of the training platform are studied in detail,and the implementation scheme is established to be a complete set of multi-level network security knowledge learning,attack and defense technical skills training,attack and defense skills confrontation competition platform system.It effectively supports the actual operation of the attack and defense research.The research of attack and defense technology and the design and Realization of the enterprise training platform can improve the learning and research of the network security issues.It is beneficial to popularize the knowledge of network security,train high quality network security personnel,and improve the awareness and ability of network security protection.It has a profound influence on the development of information.