1145%255%1324345X.80056X.80087X.80052123454.12326.91IPv432bMAC48bIPv6128b2ARPIP3NATIPIPv44DNS53IPIP1TCPTCP3SYN33TCP:InternetTCP/IP2TCP3SYNFloodTCPSYNFlood3SYNFloodTCP/IP4UDPBGPUDPUDPUDPUDPUDPTCP9DNSDNSIPIPDNS:141ICMPUDP2TCPTCP1TCP/UDPICMP2414291BA.B.C.D.2BA.B.C.D.3.AACAB.C.D.4DA.X.500B.TCP/IPC.ASN.1D.X.5095RAAA.B.C.D.6CADA.B.C.D.7.CA.B.C.D.8.CRLCA.B.C.D.9.OCSPAA.B.C.D.10.CACA.RCAB.RAC.SOAD.ARA1CA1234556784(1)(2)CA(3)10ABB1014234TTP456Diffie-Hellman7KerberosAA.B.SSOC.D.8KerberosAA.ASB.TGTC.TGSD.9KerberosCA.ASB.TGTC.TGSD.614(1)(2)(3)1212211/21141234577aABABbKDCAKDCBKDCkA,ABAKDCBKDCcKTCAKTCBKTC11KM0KM1,KM28121___C_ABCD2__B__ABCD374OSI5OSI6OSI7OSI8OSI9OSIOSI101.DMZ33DZM2.NATNATNATNATNAT9.9123412314.Internet15.CPU131IDSNID3HIDSDIDS2IDS4334NIDS45DIDS56IDS57HIDSNIDS892,?41012345678IDS3IDS1234561234571234510:1231112HoneynetInternetHoneynet3IDS14VPN1VPNVPN-VPN2VNP/32PPTPL2FL2TP343IPSecGREMPLS35IPSec3AHESPIKE36IPSecVPN//57IPSecOSICA.B.C.D.8ISAKMP/OakleyDA.SSLB.SETC.SHTTPD.IPSec9IPSecDA.AHB.TCP/IPC.IKED.ESP10AIPA.B.C.D1212343//DOSDDOS45127.,.,,:,,,,;,,,,.:.89IP1IP2IP3410ARP48IP32IP48ARPARPARPARP1311ICMPICMPICMP12TCPTCPATCPBSYN=1seq=xxBTCPBSYN=1ACK=1ack=x+1seq=yABACK=1ack==y+1ATCPBTCPATCP13TCPSYNTCP314DHCPDNSDHCPIPBOOTPDNSIPIP15NATNATIPv4NATISPInternetIPNATIPv4NATIPv616MCKED1714(public-key)(private-key)18R1-S-R2-T-19PKI1PKI220PKIPKI21CACA22RA.23CALDAPPKI24PKI2526SSLPKI.PPT1TCP/IP2SSL:SSL:,.3abc.27RAPOPProofofpossessionRARA15RA281abCAc2CA29PMIPMIPKI301abcdef2a)b)c)d)e)f)3ab211cd/e)211f)g)164:+311:2:.3233A/B123341kp2ks3ke4km56,35012173612KM03KM1,KM24KM1,KM2KM03731)233841,2,3,,4,,39403abc184142OSITCP/IPOSITCP/IP43NAT441ACL2TCPUDPICMP451192//46474849.PPT.PPT50IDSIDS51IDS5253IDS54355NIDS56HIDS57IPS5859VPN2060VPN/Qos61VPN6263IPIP64PPPPPP6566IPSecAHESPIKE67IPsec68VPNCHAPMS-CHAPMS-CHAPv2EAP69IPSec//70SSL/TLSTLSHTTPSTLSVPNTLSVPNIETLS71TLSVPN3TLSTLSTLS72;73,,,,U,7475/UWord76123Windows4774782179(1):(2)(3)(4)(5)Internet(6)(7)(8)(MSOfficeOutlookIEICQ/QQ)(9)80