A computer network stealth method and a network stealth system based on the method

Abstract

The invention discloses a network hiding method for a computer and a network hiding system based on the method. In the network hiding method, a passive processing strategy and an active processing strategy are adopted. The active processing strategy comprises the following steps of S1, when a detection behavior is ongoing according to judgment, replying false information to confuse a detector and increase the attacking difficulty; S2, faking false data traffic and a real host network behavior, and disturbing a sniffing behavior; and S3, dynamically and randomly jumping to hide a real host by taking the IP (Internet Protocol) address of the real host as a jumping element. In the network hiding system, four layers of network hiding models, including an access behavior control module, a dynamic multi-address module, a traffic confusing module and a protocol stack fingerprint confusing module are adopted. Due to the adoption of the method and system, unknown security problems can be blocked in advance, the occurrence of malicious network behaviors is blocked at a source, and advance protection is truly realized; due to the hiding characteristic, the aim of nipping in the bud can be fulfilled in the system; and the computer security is well ensured.

Description

technical field [0001] The invention relates to the technical field of computer security communication, in particular to a computer network stealth method and a network stealth system based on the method. Background technique [0002] Since mankind entered the information age, computer technology and computer networks have developed at an unimaginable speed. While providing network convenience, the safe transmission of information is particularly important, but at the same time, endless network security issues are always bothering us. For the existing protective measures: firewalls, anti-virus software, traffic monitoring, intrusion detection, etc. all have some common or unique defects. Firewalls cannot flexibly carry out active defense, and rely on a large number of filtering rules added by administrators; Anti-virus software cannot detect and kill new and changing viruses, and can only perform remedial work after the virus is infected; traffic monitoring or intrusion det...

AI Technical Summary

Problems solved by technology

For unknown security holes, it is difficult to be discovered and exploited because the attacker cannot detect and exploit them.

For malicious viruses, because of their invisibility, they cannot find a host for transmission, which also loses their effectiveness, which greatly increases the difficulty for attackers to infiltrate or virus infection.

Images