目 录 第1章 网络信息安全概述...............................................................................1 1.1 网络信息安全简介 .............................................................................1 1.1.1 网络信息安全的重要性 .........................................................1 1.1.2 网络信息安全的现状 .............................................................2 1.1.3 网络信息安全的定义 .............................................................3 1.1.4 网络信息安全的主要威胁类型 .............................................4 1.1.5 影响网络信息安全的主要因素 .............................................5 1.2 网络信息安全涉及的内容 .................................................................6 1.2.1 物理和环境安全 .....................................................................7 1.2.2 网络和通信安全 .....................................................................7 1.2.3 设备和计算安全 .....................................................................7 1.2.4 应用和数据安全 .....................................................................8 1.2.5 管理安全 .................................................................................8 1.3 网络信息安全防护 .............................................................................9 1.3.1 PDRR模型 ..............................................................................9 1.3.2 安全策略设计原则 .................................................................9 1.3.3 网络信息安全保障技术 .......................................................11 1.4 网络信息安全标准 ...........................................................................12 1.4.1 美国的TCSEC准则 .............................................................12 1.4.2 我国的安全标准 ...................................................................13 1.5 网络安全等级保护 ...........................................................................14 1.6 网络信息安全法律法规 ...................................................................15 1.6.1 《中华人民共和国网络安全法》相关规定 .......................15 1.6.2 《中华人民共和国刑法》相关规定 ...................................17 1.6.3 《中华人民共和国计算机信息系统安全保护条例》 相关规定 ...............................................................................17 1.6.4 《计算机信息网络国际联网安全保护管理办法》 相关规定 ...............................................................................17 1.6.5 其他相关法律法规 ...............................................................18 1.7 网络信息安全相关从业道德 ...........................................................18 1.8 本章实训 ...........................................................................................18 1.8.1 任务1：系统安全“傻事清单” ..................................................................18 1.8.2 任务2：网络信息安全实训平台的搭建 ......................................................22 1.9 习题 ..............................................................................................................................29 第2章 Windows系统安全 .......................................................................................................31 2.1 操作系统安全的概念 ..................................................................................................31 2.2 服务与端口 ..................................................................................................................32 2.3 组策略 ..........................................................................................................................34 2.4 账户与密码安全 ..........................................................................................................35 2.5 漏洞与后门 ..................................................................................................................35 2.6 本章实训 ......................................................................................................................37 2.6.1 任务1：账户安全配置 ..................................................................................37 2.6.2 任务2：密码安全配置 ..................................................................................41 2.6.3 任务3：系统安全配置 ..................................................................................44 2.6.4 任务4：服务安全配置 ..................................................................................48 2.6.5 任务5：禁用注册表编辑器 ..........................................................................56 2.7 习题 ..............................................................................................................................57 第3章 网络协议与分析............................................................................................................59 3.1 计算机网络体系结构 ..................................................................................................59 3.1.1 OSI参考模型 ...................................................................................................59 3.1.2 TCP/IP参考模型 .............................................................................................61 3.2 MAC地址和以太网的帧格式 ....................................................................................62 3.2.1 MAC地址 ........................................................................................................62 3.2.2 以太网的帧格式 ..............................................................................................63 3.3 网络层协议格式 ..........................................................................................................63 3.3.1 IP格式 ..............................................................................................................63 3.3.2 ARP格式 ..........................................................................................................65 3.3.3 ICMP格式 .......................................................................................................66 3.4 传输层协议格式 ..........................................................................................................67 3.4.1 TCP格式 ..........................................................................................................67 3.4.2 UDP格式 .........................................................................................................68 3.5 三次握手机制 ..............................................................................................................69 3.6 ARP欺骗攻击 ..............................................................................................................69 3.6.1 ARP欺骗攻击的原理 ......................................................................................69 3.6.2 ARP欺骗攻击的防范 ......................................................................................71 3.7 网络监听与端口镜像 ..................................................................................................71 3.7.1 网络监听 ..........................................................................................................71 3.7.2 端口镜像 ..........................................................................................................73 3.8 本章实训 ......................................................................................................................73 3.8.1 任务1：Wireshark软件的安装与使用 ........................................................73 3.8.2 任务2：ARP欺骗攻击与防范 .....................................................................76 3.9 习题 ..............................................................................................................................84 第4章 计算机病毒与木马防护................................................................................................86 4.1 计算机病毒的概念 ......................................................................................................86 4.1.1 计算机病毒的定义 ..........................................................................................86 4.1.2 计算机病毒的产生与发展 ..............................................................................86 4.1.3 计算机病毒发作的症状 ..................................................................................88 4.2 计算机病毒的分类 ......................................................................................................89 4.2.1 按病毒存在的媒体分类 ..................................................................................89 4.2.2 按病毒传染的方法分类 ..................................................................................89 4.2.3 按病毒破坏的能力分类 ..................................................................................90 4.2.4 按病毒链接的方式分类 ..................................................................................90 4.2.5 按病毒激活的时间分类 ..................................................................................90 4.3 计算机病毒的特征 ......................................................................................................90 4.4 计算机病毒的特殊编程技术 ......................................................................................91 4.5 宏病毒和蠕虫病毒 ......................................................................................................91 4.5.1 宏病毒 ..............................................................................................................91 4.5.2 蠕虫病毒 ..........................................................................................................92 4.6 手机病毒 ......................................................................................................................94 4.6.1 手机病毒的传播途径 ......................................................................................94 4.6.2 手机病毒的危害 ..............................................................................................94 4.6.3 常见的手机病毒 ..............................................................................................95 4.6.4 手机病毒的预防 ..............................................................................................95 4.7 木马 ..............................................................................................................................96 4.7.1 服务端和客户端 ..............................................................................................96 4.7.2 木马程序的基本特征 ......................................................................................97 4.7.3 木马程序功能 ..................................................................................................97 4.7.4 木马的分类 ......................................................................................................98 4.7.5 木马的工作过程 ..............................................................................................99 4.8 勒索病毒 ....................................................................................................................100 4.8.1 勒索病毒的概念 ............................................................................................100 4.8.2 勒索病毒的分类 ............................................................................................100 4.9 反病毒技术 ................................................................................................................101 4.9.1 病毒检测原理 ................................................................................................101 4.9.2 反病毒软件 ....................................................................................................102 4.9.3 病毒的预防 ....................................................................................................102 4.10 本章实训 ..................................................................................................................103 4.10.1 任务1：360杀毒软件的使用 ...................................................................103 4.10.2 任务2：360安全卫士软件的使用 ...........................................................106 4.10.3 任务3：制作一个简单的宏病毒 ..............................................................109 4.10.4 任务4：利用自解压文件携带木马程序 ..................................................111 4.10.5 任务5：反弹端口木马(灰鸽子)的演示 ...............................................113 4.11 习题 ...........................................................................................................................116 第5章 密码技术......................................................................................................................119 5.1 密码学的基础知识 ....................................................................................................119 5.1.1 密码学的发展历史 ........................................................................................119 5.1.2 信息的加密和解密 ........................................................................................120 5.2 古典密码技术 ............................................................................................................121 5.2.1 滚筒密码 ........................................................................................................121 5.2.2 掩格密码 ........................................................................................................122 5.2.3 棋盘密码 ........................................................................................................122 5.2.4 恺撒密码 ........................................................................................................122 5.2.5 圆盘密码 ........................................................................................................123 5.2.6 维吉尼亚密码 ................................................................................................123 5.3 对称密码技术 ............................................................................................................124 5.3.1 对称密码技术原理 ........................................................................................124 5.3.2 DES算法 ........................................................................................................125 5.3.3 IDEA算法 ......................................................................................................126 5.3.4 AES算法 ........................................................................................................126 5.4 非对称密码技术 ........................................................................................................127 5.4.1 非对称密码技术原理 ....................................................................................127 5.4.2 RSA算法 .......................................................................................................128 5.4.3 Diffie-Hellman算法 .......................................................................................130 5.5 单向散列算法 ............................................................................................................130 5.6 数字签名技术 ............................................................................................................131 5.6.1 数字签名的基本原理 ....................................................................................131 5.6.2 数字签名的工作过程 ....................................................................................132 5.7 数字证书 ....................................................................................................................133 5.8 加密文件系统 ............................................................................................................134 5.9 密码分析技术 ............................................................................................................134 5.9.1 穷举分析 ........................................................................................................135 5.9.2 根据字母频率分析 ........................................................................................135 5.10 本章实训 ..................................................................................................................136 5.10.1 任务1：DES、RSA和Hash算法的实现 ..............................................136 5.10.2 任务2：PGP软件的使用 .........................................................................141 5.10.3 任务3：Windows 10加密文件系统的应用 ...........................................147 5.11 习题 ...........................................................................................................................151 第6章 网络攻击与防范..........................................................................................................155 6.1 网络攻防概述 ............................................................................................................155 6.1.1 黑客概述 ........................................................................................................155 6.1.2 网络攻击的步骤 ............................................................................................156 6.1.3 网络攻击的防范策略 ....................................................................................157 6.2 目标系统的探测 ........................................................................................................158 6.2.1 常用DOS命令 ..............................................................................................158 6.2.2 扫描器 ............................................................................................................160 6.3 网络监听 ....................................................................................................................162 6.4 口令破解 ....................................................................................................................163 6.4.1 口令破解概述 ................................................................................................163 6.4.2 SMBCrack口令破解工具简介 .....................................................................163 6.4.3 口令破解的防范 ............................................................................................164 6.5 IPC$入侵 ...................................................................................................................164 6.5.1 IPC$概述 .......................................................................................................164 6.5.2 IPC$入侵方法 ...............................................................................................165 6.5.3 IPC$入侵的防范 ...........................................................................................166 6.6 缓冲区溢出攻击 ........................................................................................................166 6.6.1 缓冲区溢出原理 ............................................................................................166 6.6.2 缓冲区溢出攻击的防范 ................................................................................167 6.7 拒绝服务攻击 ............................................................................................................167 6.7.1 拒绝服务攻击的定义 ....................................................................................167 6.7.2 拒绝服务攻击的目的 ....................................................................................167 6.7.3 拒绝服务攻击的原理 ....................................................................................168 6.7.4 常见拒绝服务攻击类型及防范方法 ............................................................168 6.8 分布式拒绝服务攻击 ................................................................................................170 6.8.1 分布式拒绝服务攻击的原理 ........................................................................170 6.8.2 分布式拒绝服务攻击的防范 ........................................................................170 6.9 分布式反射型拒绝服务攻击 ....................................................................................171 6.9.1 分布式反射型拒绝服务的攻击原理及特点 ................................................171 6.9.2 常见分布式反射型拒绝服务攻击的类型 ....................................................172 6.9.3 分布式反射型拒绝服务攻击的防范 ............................................................173 6.10 蜜罐技术 ..................................................................................................................174 6.10.1 蜜罐的定义 ................................................................................................174 6.10.2 蜜罐的功能与特点 ....................................................................................174 6.10.3 蜜罐的分类 ................................................................................................175 6.11 本章实训 ...................................................................................................................176 6.11.1 任务1：黑客入侵的模拟演示 ................................................................176 6.11.2 任务2：拒绝服务攻击的演示 ................................................................181 6.12 习题 ..........................................................................................................................183 第7章 防火墙技术..................................................................................................................185 7.1 防火墙概述 ................................................................................................................185 7.1.1 防火墙的定义 ................................................................................................185 7.1.2 防火墙的功能 ................................................................................................186 7.2 防火墙技术原理 ........................................................................................................187 7.2.1 包过滤防火墙 ................................................................................................187 7.2.2 代理防火墙 ....................................................................................................188 7.2.3 状态检测防火墙 ............................................................................................190 7.3 防火墙体系结构 ........................................................................................................191 7.3.1 包过滤路由器防火墙结构 ............................................................................191 7.3.2 双宿主主机防火墙结构 ................................................................................191 7.3.3 屏蔽主机防火墙结构 ....................................................................................192 7.3.4 屏蔽子网防火墙结构 ....................................................................................192 7.4 Windows防火墙 ........................................................................................................193 7.4.1 网络配置文件 ................................................................................................193 7.4.2 高级安全性 ....................................................................................................194 7.5 Cisco PIX防火墙 .......................................................................................................195 7.5.1 PIX防火墙接口 .............................................................................................195 7.5.2 PIX防火墙管理访问模式 .............................................................................196 7.5.3 PIX防火墙配置方法 .....................................................................................196 7.6 本章实训 ....................................................................................................................200 7.7 习题 ............................................................................................................................212 第8章 入侵检测技术..............................................................................................................214 8.1 入侵检测系统概述 ....................................................................................................214 8.2 入侵检测系统的基本结构 ........................................................................................215 8.3 入侵检测系统的分类 ................................................................................................216 8.3.1 基于主机的入侵检测系统 ............................................................................216 8.3.2 基于网络的入侵检测系统 ............................................................................217 8.3.3 分布式入侵检测系统 ....................................................................................219 8.4 入侵检测技术的分类 ................................................................................................220 8.4.1 误用检测技术 ................................................................................................220 8.4.2 异常检测技术 ................................................................................................221 8.5 入侵防护系统 ............................................................................................................222 8.5.1 入侵防护系统的工作原理 ............................................................................222 8.5.2 入侵防护系统的分类 ....................................................................................222 8.5.3 入侵检测系统和入侵防护系统的关系 ........................................................223 8.6 本章实训 ....................................................................................................................223 8.7 习题 ............................................................................................................................227 第9章 VPN技术 ....................................................................................................................229 9.1 VPN概述....................................................................................................................229 9.2 VPN的特点................................................................................................................230 9.3 VPN的处理过程........................................................................................................230 9.4 VPN的分类................................................................................................................231 9.5 VPN的关键技术........................................................................................................232 9.6 VPN隧道协议............................................................................................................233 9.7 本章实训 ....................................................................................................................234 9.7.1 任务1：在Windows Server 2016上部署VPN服务器 ............................234 9.7.2 任务2：在Windows 10客户端建立并测试VPN连接 ............................240 9.8 习题 ............................................................................................................................244 第10章 Web应用安全 ...........................................................................................................246 10.1 Web应用安全概述 ..................................................................................................246 10.1.1 Web应用安全的重要性 ............................................................................246 10.1.2 Web应用体系架构 ....................................................................................247 10.1.3 Web应用的安全威胁 ................................................................................247 10.2 IIS的安全设置 .........................................................................................................248 10.2.1 IIS安装安全 ..............................................................................................248 10.2.2 用户身份验证 ............................................................................................249 10.2.3 访问权限控制 ............................................................................................250 10.2.4 IP地址控制 ................................................................................................250 10.2.5 端口安全 ....................................................................................................250 10.2.6 SSL安全 ....................................................................................................251 10.3 SQL注入 ..................................................................................................................251 10.4 XSS跨站脚本 ..........................................................................................................253 10.4.1 XSS简介 ....................................................................................................253 10.4.2 XSS的分类 ................................................................................................253 10.5 Web传输的安全 ......................................................................................................255 10.6 Web浏览器的安全 ..................................................................................................255 10.6.1 Cookie及安全设置 ....................................................................................256 10.6.2 ActiveX及安全设置 ..................................................................................256 10.6.3 Java语言及安全设置 ................................................................................259 10.7 网络钓鱼 ..................................................................................................................260 10.7.1 网络钓鱼概述 ............................................................................................260 10.7.2 网络钓鱼的防范 ........................................................................................260 10.8 本章实训 ..................................................................................................................261 10.8.1 任务1：Web服务器的安全配置 ............................................................261 10.8.2 任务2：利用SQL注入漏洞实现网站入侵的演示 ..............................267 10.8.3 任务3：通过SSL访问Web服务器 ......................................................268 10.9 习题 ..........................................................................................................................279 第11章 无线网络安全 ............................................................................................................281 11.1 无线局域网基础 .......................................................................................................281 11.2 无线局域网标准 .......................................................................................................282 11.2.1 IEEE 802.11x系列标准 .............................................................................282 11.2.2 家庭无线网络技术.....................................................................................284 11.2.3 蓝牙技术.....................................................................................................284 11.3 无线局域网接入设备 ...............................................................................................285 11.3.1 无线网卡.....................................................................................................285 11.3.2 无线访问接入点.........................................................................................285 11.3.3 无线路由器.................................................................................................286 11.3.4 天线.............................................................................................................286 11.4 无线局域网的组网模式 ...........................................................................................287 11.4.1 Ad-Hoc模式 ...............................................................................................287 11.4.2 Infrastructure模式 ......................................................................................288 11.5 服务集标识SSID .....................................................................................................288 11.6 无线加密标准 ...........................................................................................................288 11.6.1 WEP加密标准 ...........................................................................................288 11.6.2 WPA加密标准 ...........................................................................................289 11.6.3 WPA2加密标准 .........................................................................................289 11.6.4 WPA3加密标准 .........................................................................................289 11.6.5 中国WAPI安全标准 .................................................................................290 11.7 无线局域网常见的攻击 ...........................................................................................290 11.8 提高无线网络安全的方法 .......................................................................................291 11.9 本章实训 ...................................................................................................................293 11.10 习题 .........................................................................................................................299 参考文献.....................................................................................................................................301