Tm hiu v FireWall

Internet cho php chng ta truy cp ti mi ni trn th gii thng qua mt s dch v. Ngi trc my tnh ca mnh bn c th bit c thng tin trn ton cu, nhng cng chnh v th m h thng my tnh ca bn c th b xm nhp vo bt k lc no m bn khng h c bit trc. Do vy vic bo v h thng l mt vn chng ta ng phi quan tm. Ngi ta a ra khi nim FireWall gii quyt vn ny. FireWall l g ? Thut ng FireWall c ngun gc t mt k thut thit k trong xy dng ngn chn, hn ch ho hon. Trong Cng ngh mng thng tin, FireWall l mt k thut c tch hp vo h thng mng chng li s truy cp tri php nhm bo v cc ngun thng tin ni b cng nh hn ch s xm nhp vo h thng ca mt s thng tin khc khng mong mun. Internet FireWall l mt tp hp thit b (bao gm phn cng v phn mm) gia mng ca mt t chc, mt cng ty, hay mt quc gia (Intranet) v Internet: ( INTRANET - FIREWALL - INTERNET ) Trong mt s trng hp, Firewall c th c thit lp trong cng mt mng ni b v c lp cc min an ton. V d nh m hnh di y th hin mt mng cc b s dng Firewall ngn cch phng my v h thng mng tng di.

Chc nng FireWall quyt nh nhng dch v no t bn trong c php truy cp t bn ngoi, nhng ngi no t bn ngoi c php truy cp n cc dch v bn trong, v c nhng dch v no bn ngoi c php truy cp bi nhng ngi bn trong. Cu trc ca FireWall FireWall bao gm : Mt hoc nhiu h thng my ch kt ni vi cc b nh tuyn (router) hoc c chc nng router. Cc phn mm qun l an ninh chy trn h thng my ch. Thng thng l cc h qun tr xc thc (Authentication), cp quyn (Authorization) v k ton (Accounting). Cc thnh phn ca FireWall Mt FireWall bao gm mt hay nhiu thnh phn sau : + B lc packet (packet- filtering router). + Cng ng dng (Application-level gateway hay proxy server). + Cng mch (Circuite level gateway).

FireWall bo v ci g ? Nhim v c bn ca FireWall l bo v nhng vn sau : + D liu : Nhng thng tin cn c bo v do nhng yu cu sau: - Bo mt. - Tnh ton vn. - Tnh kp thi. + Ti nguyn h thng. + Danh ting ca cng ty s hu cc thng tin cn bo v. FireWall bo v chng li ci g ? FireWall bo v chng li nhng s tn cng t bn ngoi. + Tn cng trc tip: Cch th nht l dng phng php d mt khu trc tip. Thng qua cc chng trnh d tm mt khu vi mt s thng tin v ngi s dng nh ngy sinh, tui, a ch v.vv kt hp vi th vin do ngi dng to ra, k tn cng c th d c mt khu ca bn. Trong mt s trng hp kh nng thnh cng c th ln ti 30%. V d nh chng trnh d tm mt khu chy trn h iu hnh Unix c tn l Crack. Cch th hai l s dng li ca cc chng trnh ng dng v bn thn h iu hnh c s dng t nhng v tn cng u tin v vn c chim quyn truy cp (c c quyn ca ngi qun tr h thng). + Nghe trm: C th bit c tn, mt khu, cc thng tin chuyn qua mng thng qua cc chng trnh cho php a v giao tip mng (NIC) vo ch nhn ton b cc thng tin lu truyn qua mng.

+ Gi mo a ch IP. + V hiu ho cc chc nng ca h thng (deny service). y l kiu tn cng nhm lm t lit ton b h thng khng cho n thc hin cc chc nng m n c thit k. Kiu tn cng ny khng th ngn chn c do nhng phng tin t chc tn cng cng chnh l cc phng tin lm vic v truy nhp thng tin trn mng. + Li ngi qun tr h thng. + Yu t con ngi vi nhng tnh cch ch quan v khng hiu r tm quan trng ca vic bo mt h thng nn d dng l cc thng tin quan trng cho hacker. Ngy nay, trnh ca cc hacker ngy cng gii hn, trong khi cc h thng mng vn cn chm chp trong vic x l cc l hng ca mnh. iu ny i hi ngi qun tr mng phi c kin thc tt v bo mt mng c th gi vng an ton cho thng tin ca h thng. i vi ngi dng c nhn, h khng th bit ht cc th thut t xy dng cho mnh mt Firewall, nhng cng nn hiu r tm quan trng ca bo mt thng tin cho mi c nhn, qua t tm hiu bit mt s cch phng trnh nhng s tn cng n gin ca cc hacker. Vn l thc, khi c thc phng trnh th kh nng an ton s cao hn.