防御

Iraq explains why 51% of Poles opposed the missile-defence plan in one recent survey, says Radek Sikorski, an Atlanticist Pole who recently lost his job as defence minister amid a row over how exactly to negotiate with the United States over missile

伊拉克问题解释了为什么在最近一次民意调查中，51%的波兰人反对导弹防御计划，拉杰克西科尔斯基如是说，他是一位大西洋主义波兰人，最近失去了作为国防部长的工作，当时他争论说与美国就导弹防御计划谈判是多么重要。

Enhanced defense offers promotion on robusticity and survivability of information system. It prevents attacker from damaging system even he already has broken through one or several but not all layers of the system.

纵深防御策略意在提高信息系统的抗打击能力和可生存能力，使得攻击者在突破一层防御之后，无法破坏整个信息基础设施。

The Pit of Saron is the second wing of the dungeon complex known as the Frozen Halls, located within Icecrown Citadel.

大致含义：是巫妖王综合防御体系：寒冰大厅之外的第二个防御要塞，位于冰冠要塞内部。

Through the decomposition of network operation behavior and the data mining of various data,forms the most basic smallest unit of network operation behavior（DNA of network action description）,uses the Teiresias evolution algorithm to carry on the overall situation ergodicity combination to produce the new description language.

通过对网络操作行为的分解和对各种数据的挖掘，形成最基本最小的网络行为语言描述单元，再使用Teiresias进化算法对其进行全局遍历性的组合，计算产生新的描述语言，进行可行性判断后，对可行的结果进行规则匹配并进行风险评估，产生新的防御规则，从而达到入侵防御系统规则库完备的目的。

This paper describs particularly on penetrating the software-based firewalls,the new attacking methods that the in existence Firewalls and Anti-Virus can't defend,and the principle of the software-based firewalls,then a design of newer Secruity system that can crush up all kinds of threat from Internet will appear from a depth-defending view.The new firewall is a fuse of software-based firewall,HIPS,HIDS,and so on.

本文先详细讲述了各种突破软件防火墙的高级技术、现有软件防火墙以及杀毒软件不能防范的各种新式黑客攻击手段、软件防火墙的实现原理及技术；然后从纵深防御的高度进行新式安全系统的设计，给出了能适应新型黑客攻击的，可以防御目前各种网络安全威胁的新型软件防火墙设计方案。

This paper describs particularlyon penetrating the software-based firewalls,the new attackingmethods that the in existence Firewalls and Anti-Virus can'tdefend,and the principle of the software-based firewalls,then adesign of newer Secruity system that can crush up all kinds ofthreat from Internet will appear from a depth-defending view.Thenew firewall is a fuse of software-based firewall,HIPS,HIDS,and soon.

本文先详细讲述了各种突破软件防火墙的高级技术、现有软件防火墙以及杀毒软件不能防范的各种新式黑客攻击手段、软件防火墙的实现原理及技术；然后从纵深防御的高度进行新式安全系统的设计，给出了能适应新型黑客攻击的，可以防御目前各种网络安全威胁的新型软件防火墙设计方案。

This article first introduced the concepts of inshore defense strategy and the environment of battlefield, then discussed how to define the scope of battlefield in inshore defense strategy and its basis.

本文首先从近海防御战略和战场环境的概念入手，论述了近海防御战略战场范围的确立及依据。

The defender knows she's being attacked, but not what attack is coming in, and can put up a defense she knows unless flatfooted.

防御者知道自己被攻击，但不知道何种攻击来袭，并且只要没有措手不及就可以启用所知的防御模式。

Their primary base defense uses the same kind of technology as the IFV Multigunner, which allows players to customize that defense's weapon by garrisoning it with different kinds of infantry.

他们基地防御的主力是一种与多炮手式步兵战车相同的技术，可以让玩家通过进驻不同种类的步兵来获得不同的防御武器。

Our main contribution is in presenting;(1 )the definition of masqueraded degree for a computer in sometime by the number of masqueraded IP divide the number of the network session;(2) the algorithm for maintaining the queue of masqueraded IP, changing their states and competing the masqueraded IP by sending ARP messages; Using DivertSocket to monitor the packets, and basing Netfilter and IPTables, we design an experimental system IPDM based on this model, and satisfactory results are obtained.

改变其状态和竞争伪装IP；使用监测数据包的DiverSocket，Netfilter和IPTables，我们设计了一个基于此模型的实验IPDM，获得了满意结果。引言扩大了IP伪装的范围，从而增加了攻击者的攻击难度，起到了主动防御的作用。目前解决网络安全问题的主要技术手段有加密技术，基于网络、主机的各种防范措施，以及信息伪装技术等。这些技术在防御网络入侵、保护信息安全方面均有一定的作用。但不能很好

The split between the two groups can hardly be papered over.

这两个团体间的分歧难以掩饰。

This approach not only encourages a greater number of responses, but minimizes the likelihood of stale groupthink.

这种做法不仅鼓励了更多的反应，而且减少跟风的可能性。