局域网交换机安全
在书中通过一个个二层攻击场景,以及用于这些攻击的化解之策,来强调第二层安全的重要性;并展望了将来以及正在流行的二层安全系统结构及技术,包括线速的ACL、IEEE802.1AE、CiscoINBS以及结合IPSec与L2TPv3的安全伪线。要懂得:网络安全并不能只靠防火墙、侵/入检测系统乃至是内容过滤设备。假如没有上述这些设备,在网络的第二层使用交换机同样可以施行网络安全。局域网交换机安全Cisco.Press.LAN.Switch.Security.Sep.2007.pdf
(In the book, the importance of layer-2 security is emphasized through layer-2 attack scenarios and countermeasures for these attacks; and the future and popular layer-2 security system structures and technologies, including wire speed ACL, IEEE802.1AE, CiscoINBS, and security pseudowire combining IPSec and L2TPv3. Understand that network security is not just about firewalls, intrusion detection systems, or even content filtering devices. Without these devices, the use of switches at the second layer of the network can also enforce network security.
LAN Switch Security Cisco.Press.LAN.Switch.Security.Sep.2007.pdf)
页:
[1]