2024IPS入侵防御技術(shù)標準

GB19286-2015GB3873GB5465GB/T3047.2高度進制為44.45mmGB/T15395-1994GB2894GB2423GB4208—1993外殼防護等級（IP代碼GB9254—2008GB3047.4高進制為44.45mmGB/T25069-2010GB/T18336.1-2008（idtISO/IEC15408-GB/T18336.2-2008（idtISO/IEC15408-GB/T18336.3-2008（idtISO/IEC15408-

BenchmarkingTerminologyforNetworkInterconnectionDevices，RFC1242BenchmarkingMethodologyforNetworkInterconnectDevices，RFC2544BenchmarkingTerminologyforFirewallPerformance，RFC2647BenchmarkingMethodologyforFirewallPerformance，Internet-DraftGB/T17626電磁兼容試驗和測量技術(shù)GB/T14733- GB/T15629.3- 3 電子電工產(chǎn)品應(yīng)用環(huán)境條件機械和試驗環(huán)境條件GB9254-1998 GB/T4064-GB/T12501-GB/T3873-

GB19286-2015GB5465GB/T3047.2高度進制為44.45mmGB/T15395-1994GB2423.1電工電子產(chǎn)品的基本環(huán)境試驗規(guī)程實驗A：低溫試驗方法GB2423.2電工電子產(chǎn)品的基本環(huán)境試驗規(guī)程實驗B：高溫試驗方法GB2423.4Db：交變濕熱試驗方法GB2828逐批檢查計數(shù)抽樣程序及抽樣表(適用于連續(xù)批的檢查)GB2829GB3873通信設(shè)備產(chǎn)品包裝通用技術(shù)條件GB4943GB6388GB/T13426GB/T13543數(shù)字通信設(shè)備環(huán)境試驗方法GB191包裝儲運圖示標志GB6388IEC62351Powersystemsmanagementandassociatedinformationexchange-DatacommunicationssecurityIEC61588Precisionclocksynchronizationprotocolfornetworkedmeasurementand IEEE

Information

GJB908AGJB726A-2004GJB571A-2005GJB1442A-2006GJB1362A-

IPC-A-610EnglishChineseInstituteofElectricalandWirelessLocalAreaLocalAreaMediumAccessVirtualLocalAreaAccessControlQualityof\hSStandard，定位為該檔次的標準型產(chǎn)品，具有該檔次完整功能。強調(diào)性價MMiddle，定位為該檔次的中間型產(chǎn)品，具有該檔次完整功能，同時在硬件AAdvanced，定位為該檔次的高級型產(chǎn)品，具有該檔次完整功能，并提供高EEnhanced，定位為該檔次的增強型產(chǎn)品，具有該檔次完整功能，并提供高DPtechIPS2000-GA-EACDPtechIPS2000-GA-EDual整機高度符合GB/T3047.2IEEEIEEEIEEE應(yīng)符合GB4943相關(guān)規(guī)定。對下面相關(guān)的危險采取適當(dāng)?shù)姆雷o措施，減少或避免由于下列各種危險支持IGMPSNOOPINBG依據(jù)GJB908-90、GJB726A-2004、GJB1442-1992及IPC-A-610、SJ/T10630-19951BOMBOM;2345用電網(wǎng)供電的產(chǎn)品機箱內(nèi)無≥3mm6振動：按照GB/T2423.10“試驗Fc”的試驗方法進行。沖擊：按照GB/T2423.5“試驗Ea”的試驗方法進行。碰撞：按照GB/T2423.6“試驗Eb”的試驗方法進行。4。3；5。xitongadmin、1；3；5min3.進入IPSWEBIPS/AV/URL/APPlicense2。UMCIPS模式，ping\h1；2；3.1；3；B1；IPGroupAA，IPGroupBB，有預(yù)1；VLANAAVLANBB，1；1；1；1；1；IPS/AV虛擬系統(tǒng)重建正常，IPS/AVAA5000、1000500M、CPU20%、內(nèi)存使用20%20%，使用測試儀器在虛擬系統(tǒng)發(fā)生超閾值1；實測環(huán)境：weblogicjavaweblogic（shell）上傳文件、按測試組網(wǎng)連接設(shè)備，攻擊PC上安裝kalilinux系統(tǒng)，被攻擊PC上\h \h 攻擊PC像被攻擊PC發(fā)起溢出攻擊：\hCVE-2012-0754 \hCVE-2016-0051，有預(yù)期結(jié)果1Q/DPT002—PCkalilinuxPCdvwaor1=11sqlinjectionuseridsql1'unionselectuser,passwordfrommysql.user2sqlmapdvwasqlmap-u\ht=Submit"--cookie="security=low;1.按測試組網(wǎng)環(huán)境，2PCIPS2。PCkalilinuxPCdvwaIPSIPSTCPRESET\hhttp://IP/usr/share/dirb/wordlists/common.txt2，攻擊命令：nikto-Call-h\hhttp://IPnmap-sS-T4-Pn-p0-65535-oNFullTCP-iLIPnmap-sU-T4-Pn-p0-65535-oNFullUDP-iL2。phpmultipartformdataflood-h。。。-p。。。-t60MS15-034IIS7.0HTTP.sysPCkalilinuxPCdvwa\hscript>2bypassPCdvwaxssstorePCftpsshtelnet123IPSPCWorm_Macrowamp/9233LupperPCkalilinuxPC3cdftpPCkalilinuxIPip_frag812tcp_seg1ip_fragPCPCvlantag、qinqmpls、gre、pppoe、vxlan1；、為：webattack、方向：客戶端到服務(wù)端、父協(xié)議：HTTP、負載：固定PCIP、其他參數(shù)為默認值；sina、類型：深度檢測類、父協(xié)議：UDPsina、\h10mbps1；UMCPCPCdns\hdns測試PCSendPcap_v1.1.exePCDNSTester.exePCDDOS1UMC；UMC管理PCWEBIPSIPSsyslogUMCPCWEBUMCUMCIPIP、目的端口、UMC；IPS1；IPSUMC；SYNFLOODSYNFLOOD測試設(shè)備SYNFLOODPCFTPFTPPCsynfloodTCPFLOODTCPFLOOD測試設(shè)備TCPFLOODwebTCP1synflood1IP2flagsyn3PCsynflood1PCackflood4UMCDDoSPCsynfloodPCsynfloodUMCDDoSPCsynflood350ppsUMCDDoSPCsynflood0ppsUMCDDoSPCackfloodPCackfloodUMCDDoSPCackflood350ppsUMCDDoSPCUDPFLOODUDPFLOOD測試設(shè)備UDPFLOODwebUDPudpflood11id23IP、閾1000udpflood21PCudpflood11PCudpflood24UMCDDoSPCudpflood1PCudpflood1UMCDDoSPCudpflood11000ppsUMCDDoSPCudpflood10ppsUMCDDoSPCUMCDDoSPCudpflood21000ppsUMCDDoSPCICMPFLOODICMPFLOOD測試設(shè)備ICMPFLOODwebicmpicmpflood11id23IP、100icmpflood21UMCPCicmpflood1PCicmpflood11UMCPCicmpflood2PCicmpflood24PCicmpflood1100pps0ppsPCicmpflood2100ppsIGMPFLOOD測試設(shè)備IGMPFLOODwebotherigmpflood11id23IP、100igmpflood21UMCPCigmpflood1PCigmpflood11UMCPCigmpflood2PCigmpflood24PCigmpflood1100pps0ppsPCigmpflood2100ppsFLOODFLOODwebother1000、防護動作為觀察；PCipfragfloodPCipfragflood1UMCDDoSPCipfragfloodPCipfragfloodUMCDDoSPCipfragflood1000ppsUMCDDoSPC\h\heicar.txteicar_com.zip1.IPS成功阻斷測試PC下載病毒文件：\heicar.txteicar_com.zip、eicarcom2.zip\h\h\h\h\h4.禁用步驟3URLPC\h\h3。\h\h\h\h\h\h3。2；UMC1；配置黑名單功能將被攻擊PCIPIPSlandping、ipudpfragglewinnukeicmpsmurfteardrop3PCPClandping、ipudpfragglewinnukeicmp