Bao Mat He Thong Va Mang May Tinh -Sachvn247

7/21/2019 Bao Mat He Thong Va Mang May Tinh -Sachvn247

1/104

Cng ty in ton v truyn s liuTrung tm in ton v truyn s liu khu vc I

--------------

Ti liu o to:

!o m"t h thng vmng my t#nh


2/104

!o m"t h thng v mng my t#nh

$ n%i &'()))

ii


3/104


*+c l+c

*, -u.........................................................................../

0h-n / ' Cc v1n chung v mng my t#nh v 2!o m"th thng.........................................................................3

I. C4n 2!n v mng my t#nh.............................................3

1. Khi nim chung:......................................................................31.1. Cc thnh phn ca mng my tnh:..................................31.2. Phn loi mng my tnh:...................................................3

2. Mng Internet v b giao thc TC!I......................................."2.1. Mng Intenet:.....................................................................!

2.2. C"n #$n %& giao th'c (CP)IP...............................................*2.3. +em ,t mt /0 le c h4nh mng tong 56I+:..............17

II. Cc v1n chung v 2!o m"t h thng v mng......../&

1. Cc v#n $% v% an ninh mng:................................................1&1.1. Mt /0 8hi ni9m %& #$o mt...........................................1;1.2. #$o mt mng % h9 th0ng:.................................271.2. Mt /0 h4nh th'c tn c?ng mng.....................................211.3. Cc m'c #$o %9 an ton mng..........................................23

2. Cc 'h(ng thc m) ho...........................................................2"2.1. @Ac Bim chng ca cc phDng th'c mE hFa:.................2!2.2. Cc phDng th'c mE hFa:....................................................2*

0h-n ( ' Cc l5 h6ng v 7h8ng th9c t1n cng mng 7h62in..............................................................................3(

I. Cc l5 h6ng v i;m yu c


4/104


3.3. Cc %n B& #$o mt B0i %Ti N=ch %Q Se#........................!1

II. *%t s 7h8ng th9c t1n cng mng 7h6 2in...............>?

1. Ucanne................................................................................!*

2.2. Pa//VoN Cac8e:.............................................................!K2.3. (oWan/...............................................................................*72.!. UniXe:...............................................................................*2

0h-n 3 ' Cc 2in 7h7 2!o v mng my t#nh.................??

I. Cc 2in 7h7 ki;m sot h thng................................??

1. Ki/m -ot h thng ;ua *ogiao thc ??@..........................................................................A22.1. ]iTi thi9 chng:...............................................................^22.2. Cc hot Bng ca giao th'c UU< B0i %Ti N=ch %Q.............^32.3. UU< YanN/ha8e..................................................................^32.!. _ t4nh 8im ta tnh ,c th`c ca Ue%e B[c m? t$nh /a:.....................................................................................^*2.*. _ t4nh 8im ta tnh ,c th`c pha Client:..............^^

IIIA. By ng h thng DrEF=lls....................................@G

1. >iBi thiu chung:.....................................................................A1.1. @=nh ngha:......................................................................^L1.2. Ch'c n"ng ca eVall/:....................................................^L1.3. Phn loi:..........................................................................^;1.!. 6gyJn tbc hot Bng ca eVall/:................................^;

2. Kin trDc chung ca


5/104


1.Cc bBc chuJn b7:.....................................................................FA1.1. +c B=nh B0i t[ng cn #$o %9:........................................K^1.2. +c B=nh ngy cD B0i %Ti h9 th0ng.................................K^1.3. +c B=nh phDng n th`c thi chnh /ch #$o mt............KK

2. Thit *5' Cc ;ui tc!th t8c.................................................F2.1. Cc th tQc B0i %Ti hot Bng ty nhp #t h[p php......KL2.2. (in 8hai chnh /ch #$o mt.........................................K;2.3. (hidt lp cc th tQc #$o %9 h9 th0ng.............................L7

3. Ki/m traL $nh gi v hon thin chnh -ch b4o m5t.........23.1. im ta Bnh gi............................................................L23.2. Yon thi9n chnh /ch #$o mt:......................................L3

Ti liu th=m kh!o.........................................................G>

%


6/104


7/104


*, -u

Cng %Ti /` pht tin ca c?ng ngh9 th?ng tin c?ng ngh9 mng

my tnh % BAc #i9t l mng Intenet ngy cng pht tin BaNng % phong ph. Cc N=ch %Q tJn mng Intenet BE ,m nhp%o h hdt cc lnh %`c tong B\i /0ng ,E hi. Cc th?ng tin taoBHi tJn Intenet cng Ba Nng c$ %& ni Nng % h4nh th'ctong BF cF t nhi& th?ng tin cn #$o mt cao #i tnh 8inh tdtnh chnh ,c % tin cy ca nF.

jJn cnh BF nhZng N=ch %Q mng ngy cng cF gi t= yJc ph$i B$m #$o tnh Hn B=nh % an ton cao. (y nhiJn cch4nh th'c ph hoi mng cng t nJn tinh %i % ph'c tp hDn NoBF B0i %Ti mGi h9 th0ng nhi9m %Q #$o mt BAt a cho ng\i$n t= l hdt /'c an tqng % cn thidt.

+t pht tr nhZng th`c td nJ tJn hi9n nay tJn thd giTi BE,t hi9n t nhi& c?ng ngh9 liJn an Bdn #$o mt h9 th0ng% mng my tnh. i9c nbm #bt nhZng c?ng ngh9 ny l hdt/'c cn thidt %4 c?ng tc #$o mt ca cc h9 th0ng mng Inteneti9t 6am nFi chng % mng ni # ca 8hch hng cng 8h?ngnsm ngoi cc yJ c tJn.

Chnh %4 %y (ng tm @i9n ton % (y&n /0 li9 h %`c IC1u %Ti mQc Bch nng cao cht l[ng N=ch %Q cng cp %c?ng tc ch"m /Fc 8hch hng BE tidn hnh tH ch'c 8ho hqc %$o mt h9 th0ng % mng my tnh. ho hqc ny gip 8hchhng hi B[c cc %n B& liJn an Bdn #$o mt h9 th0ng %mng my tnh nh:

- Cc %n B& chng %& h9 th0ng % cc N=ch %Q cngcp tJn mng Intenet

- Cc Bim yd % lG hHng #$o mt th\ng cF tJn mt/0 h9 th0ng cng cp N=ch %Q.

- Cc phDng th'c tn c?ng mng phH #idn % cc #idnphp phng ch0ng

- (hidt lp cc chnh /ch #$o mt B0i %Ti h9 th0ng.

(i li9 ny B[c #iJn /on B phQc %Q 8ho hqc tJn. C tcca ti li9 B[c chia lm #a phn gvm:

- Phn 1: (4nh #y cc %n B& chng %& mng mytnh % #$o mt h9 th0ng.

- Phn 2: (4nh #y cc %n B& %& lG hHng #$o mt

Bim yd ca h9 th0ng % mt /0 N=ch %Q cng cpw


8/104


9/104

!o m"t h thng v mng my t#nh 0h-n /

0h-n /' Cc v1n chung v mng my t#nh v2!o m"t h thng

I. C4n 2!n v mng my t#nh

1. Khi nim chung

/./. Cc thnh 7h-n c giZacc my tnh. Cc tn hi9 Bi9n t> BF #i th= cc gi$ t= NZ

li9 NTi Nng cc ,ng nh= phn on - oXu. (t c$ cc tn hi9 B[cty&n giZa cc my tnh B& thc mt Nng /Fng Bi9n tr Muno BF t$i tr cc tn /0 aNio tTi /Fng c`c ngbn %#au % tiahvng ngoi. (z theo tn /0 ca /Fng Bi9n tr cF th Nng cc B-\ng ty&n %t lR 8hc nha B ty&n cc tn hi9

1.1.3.idn tc mng

idn tc mng th hi9n cch n0i cc my tnh %Ti nha a /ao% tp h[p cc i tbc i Tc m tt c$ cc th`c th tham giaty&n th?ng tJn mng ph$i tn theo B B$m #$o cho mnghot Bng t0t.

Cc cch n0i cc my tnh B[c gqi l h4nh tng topologyu camng

Cc tp h[p i tbc i Tc ty&n th?ng B[c gqi l giao th'cpotocolu ca mng


10/104


/.(. 0hn loi mng my t#nh

1.2.1. Phn loi theo 8ho$ng cch B=a lR

Phn loi theo 8ho$ng cch B=a lR l cch phH #idn % th?ng

NQng nht. (heo cch phn loi ny ta cF cc loi mng /a: Mng cQc #: NQng tJn mngIntenet % # giao th'c (CP)IP.

2. Mng Internet v b giao thc TC!I

(./. *ng IntErnEt(ht ngZ }Intenet} B[c ,em nh l mt }mng ca cc mng}

hay mt liJn 8dt mng cF tnh ton c. C?ng ngh9 Intenet aB\i cho php ng\i /> NQng tJn ton c cF th chia ,k tao BHith?ng tin %Ti nha tong nhi& lnh %`c. CF th nFi cc N=ch %Qca mng Intenet cF mAt tong h 8hbp cc lnh %`c ca cc/0ng ngy nay.


11/104


2.1.1. pht tin:

6"m 1;^; cD an nghiJn c' % pht tin tiJn tidn thc j0c phng Mx fN%anceN ~e/each PoWect fgencyu BE ,y N`ngthnh c?ng mng f~Pf6et cho php 8dt n0i ! tng tm my

tnh tJn ton nTc Mx phQc %Q mQc Bch n /`. hi Bf~Pf6et /> NQng # giao th'c 6CP 6etVo8 Contol Potocolu.

o giZa nhZng n"m 1;K7 hq giao th'c (CP)IP (an/mi//ionContol Potocol)Intenet Potocolu B[c int Ce @i hqc UtanoNu% ~o#et ahn jj6u pht tin #an B cng tvn ti %Ti 6CP %Bdn n"m 1;L3 th4 hon ton thay thd 6CP tong mng f~Pf6et.

o B nhZng n"m 1;L7 mng f~Pf6et B[c tch lm haiphn: phn Nn /` phQc %Q mQc Bch nghiJn c' %n giZ tJn lf~Pf6et % phn n /` cF tJn l mng MI


12/104


KitE:i tr Client ca mtho/t tJn mngw Ua 8hi nhn B[c Bp 'ng tr Ue%e Client ,> lRth?ng tin BF B hin th= cho ng\i /> NQng.

Lministr=tion:


13/104


+t %& 8ha cnh #$o mt nh[c Bim ca # giao th'c (CP)IPl 8h?ng hG t[ ,y N`ng cc cD chd #$o mtw N Nng B0i %Ti cchot Bng gi$i mE nghe tm #bt tTc gFi tin. NQ: C tcchng ca mt gFi NZ li9 (CP nh /a:

$Jnh ' Nhun ng sEgmEnt trong TC0

6h h4nh cho thyw ton # phn heaNe l B[c B=nh Nngch|n n&n NZ li9 phn ny cF th lm gi$ hoAc N N t4mcc th?ng tin gi$i mE ...

MAt 8hc hot Bng ca cc N=ch %Q tong tng 'ng NQng N`a%o B=nh Nanh cc cHng N=ch %Q tJn h9 th0ng BF. CF hai loicHng:

U0 cHng ngvn: C gi t= tz Rw

U0 cHng Bch: CF mt /0 loi N=ch %Q /> NQng cc gi t=mAc B=nh Vell-8noVuw Nn Bdn ngy cD N #= ,mnhp % ph hoi N`a %o cc loi N=ch %Q Nng cc cHngmAc B=nh.

6d tJn h9 th0ng B hn chd ph hoi cF th thidt lp chnh/ch nh BFng cHng N=ch %Qw ty nhiJn Bi& ny Nn Bdn hnchd l tr ch0i cng cp N=ch %Q BF. (ong phn hai / t4nh #ycQ th hDn cc Bim yd tong cc loi N=ch %Q % tr BF thidtlp cc #i9n php % ,y N`ng chnh /ch #$o mt h[p lR B0i %TimGi h9 th0ng.

2.2.2. 6etVo8 B=a ch IP /#net/ % ho/tname:

Cc my tnh tJn mng B[c phn #i9t %Ti nha #sng B=a cha BF cc gFi tin mTi cF th chyn giao tTi Bng Bch cn tTi.

1^-#it /oce pot nm#e1^-#it /oce pot nm#e 1^-#it Ne/tination potnm#e

1^-#it Ne/tination potnm#e

32-#it /eence nm#e32-#it /eence nm#e

32-#it ac8noVleNgment nm#e32-#it ac8noVleNgment nm#e

!-#itheaNelength

!-#itheaNelength

e%e/eN^-#itu

e%e/eN^-#itu

5 f P ~ UO

~ C U U I

] Y ( 66

5 f P ~ UO

~ C U U I

] Y ( 66

1^-#it VinNoV /ie1^-#it VinNoV /ie

1^-#it (CP chec8/m1^-#it (CP chec8/m 1^-#it gent pointe1^-#it gent pointe

option/ nd cFuoption/ nd cFu

Nata nd cFuNata nd cFu


14/104


Y9 th0ng B=a ch ny B[c $n lR #i giao th'c mng IP IntenetPotocolu. MGi my tnh cF mt B=a ch IP ca iJng nF.

Mt B=a ch IP cF chi& Ni 32 #it/. C tc mt B=a ch IPB[c chia lm hai phn: phn netVo8 % phn ho/t. Phn netVo8

B=nh Nanh mng ch'a ho/t. Phn ho/t B=nh Nanh ho/t tongmng BF. @ B$m #$o 8h?ng cF /` nhm ln B=a ch tJn mngcc nh 8hoa hqc BE thnh lp mt tH ch'c cF tch nhi9m phnph0i % $n lR B=a ch tJn mng.

Cc B=a ch IP B[c chia thnh * lTp f j C . (ong BFch cF 3 lTp f j C B[c /> NQng th`c td B Bnh B=a ch choho/t cn lTp Nng cho mltica/t aNNe// lTp Nnh B N` tZ.

@=a ch IP cF th %idt Nng cD /0 17 phn tch #i cc Nchm NQ: 1;2.13;.*.12u hoAc %idt Nng h9 1^

7,C7Ljf^^u. C tc ca cc lTp B=a ch ny nh /a:O= chP lQ7 L:

7 netiN ho/tiN

$Jnh ' C1u trRc O= chP lQ7 L


15/104



16/104


ho/t tJn mGi /#netu m /0 l[ng #it ly phn ho/tiN nhi& hayit.

@ tch #i9t giZa B=a ch mng % B=a ch ho/t ng\i ta Nngnetma/8. @ tch #i9t giZa /#net aNNe// % B=a ch ho/t ng\i

ta Nng /#net ma/8.

Mt /0 % NQ %& B=a ch mng cch Nng netma/8 % /#netma/8

hi th`c hi9n /#net mt mng tong mt lTp mng th4 /0 l[ng/#net / ydt B=nh /0 #it B[c ly tr phn ho/t B phQc %Q cho/#net. NQ #n m0n chia 1 mng thnh cc mng con gvm 32/#net th`c td ch Nng 37 /#net tJn mGi B=a ch mng/#net B l /#net eo /#net c0i l /#net #oaNca/t u camt mng lTp jw #n cn * #it 2*32u cho /#net cn li 11 #itcho ho/t tJn mGi /#net 8ho$ng 27!^ ho/t tJn mGi /#netu.

11111111. 11111111.11111777.77777777 No BF /#etma/8l : 2**.2**.2!L.7.

$ostn=mE: i9c nhT B=a ch IP B=nh Nanh mGi ho/t t nJn8hF 8h"n 8hi /0 l[ng cc ho/t tJn mng lTn. hi ni9m ho/tname /gi$i ydt %n B& ny. Yo/tname l tJn m ng\i $n t= BAtcho mt thidt #= mng cF th l ote hoAc my tnh ...u B N$n lR %& mAt hnh chnh. MGi thidt #= tJn mng th\ng cF mtho/tname % B=a ch IP tDng 'ng. (Jn mng mt ho/t ch B[c,c th`c #sng B=a ch IP ca nF. o BF B ho/t cF th hotBng B[c tJn mng th4 ho/tname ph$i BDc chyn BHi /angB=a ch IP tDng 'ng %Ti nF. @ th`c hi9n B[c %i9c chyn BHiny ng\i ta cF th Nng cc cD chd to #$ng ho/tname ta#le hoAc

omain 6ame Ue%ice 6Uu cho php l cc nh , tr B=a ch IP/ang ho/tname tDng 'ng % ng[c li.


17/104


2.2.3. Mt /0 N=ch %Q ca giao th'c (CP)IP:

Cc N=ch %Q ny nsm tng 'ng NQng tong # giao th'c(CP)IP. Cng %Ti pht tin ca Intenet cc 'ng NQng ngy cng BaNng % hon thi9n hDn. MGi N=ch %Q cF mt giao th'c iJngw Ua

By / giTi thi9 hot Bng ca cc N=ch %Q ny:TElnEt:

(elnet l N=ch %Q cho php thm nhp loginu tr ,a %o ccmy tnh /> NQng giao th'c cng tJn l ( NQng giao th'c cng tJn l O(P B th`c hi9n %i9c ty&nt9p. ]iao th'c O(P cF th hG t[ tt c$ cc 8i t9p %"n #$n fUCIInh= phn cc t9p cc h9 Bi& hnh 8hc nha...u. O(P l mt

N=ch %Q BE trng B[c /> NQng t nhi& ty nhiJn nF cF nh[c Bimchnh l ng\i Nng 8h?ng ph$i lc no cng #idt B[c ton # Nanh/ch cc t9p cF th /ao chp % t4nh ty nhp cc th mQcB t4m t9p th\ng chm.

SOch v+ th t#n in tY UZ'm=ilX

(h Bi9n t> -mailu l N=ch %Q B[c /> NQng ng Ei % l B\inht tJn Intenet. -mail gip ta tao BHi th?ng tin mt cch NNng nhanh chFng % thn ti9n %Ti nhi& ng\i tJn mng. -mail

cF Bim l nF Nng phn m&m tDng B0i BDn gi$n N /> NQng/o %Ti cc N=ch %Q th?ng tin 8hc nF l N=ch %Q yJ c mng cFgi$i th?ng phn c'ng phn m&m t nht. ]iao th'c /> NQngtong N=ch %Q -Mail l giao th'c ty&n th BDn gi$n UM(P -Uimple mail tane potocolu. Mt /0 chDng t4nh ty&n th BDngi$n t phH #idn tJn 56I+ l UenNmailw tJn SinNoV/ le,change Ue%e. (heo giao th'c ny %i9c tao BHi th B[c th`chi9n #i cc tm ty&n th M(f - Me//age (ane fgentu ng\ig>i 8h?ng t`c tidp ty&n th Bdn ng\i nhn m th B[c l tyna cc M(f tng gian No BF cD chd hot Bng ca -mail B[cgqi l l % tyn tidp. 6g\i /> NQng nhn th a giao th'c PP 3Po/t oce Potocol e/ion 3u hoAc IMfP. Yi9n nay cc t4nh


18/104


Ny9t Se# nh I % 6et/cape hG t[ cc thnh phn BFng %ai tPP3 Client 6et/cape Me//aging % Intenet Mailu

SOch v+ thng tin [orl [iE [E2

=ch %Q th?ng tin SolN SiNe Se# SSS - gqi tbt l Och v+[E2u l N=ch %Q th?ng tin mTi nht % cF t0c B pht tin mnhnht. @im mnh ca Se# l giao Ni9n thn thi9n %Ti ng\i />NQng 8h$ n"ng tch h[p %Ti cc N=ch %Q th?ng tin 8hc nh O(P -mail ]ophe....

6goi cc Nng %"n #$n N=ch %Q Se# cn hG t[ c$ cc th?ngtin NTi Nng Ba phDng ti9n mltimeNiau Bv hqa h4nh $nh mthanh. (Jn mGi mt tang Se# cF th to 8dt n0i tr #t c' Bimno ca ti li9 hi9n th\i tTi mt ti li9 8hc tong mng. =ch %Q

Se# /> NQng giao th'c ty&n /iJ %"n #$n Yypete,t (anePotocolu giao th'c ny B[c Bnh gi l mt giao th'c BDn gi$n% hi9 $ nht tong cc giao th'c tng 'ng NQng. Chi tidthot B?ng ca N=ch %Q Se# % cc %n B& #$o mt liJn an B[ct4nh #y tong phn 2 - j$o mt N=ch %Q Se#.

(.3. BEm \]t m%t s DlE c1u hJnh mng trong ^_IB:CF mt /0 l[ng lTn cc le tJn h9 th0ng 56I+ liJn an Bdn c

h4nh % hot Bng ca giao th'c (CP)IP ng\i $n t= h9 th0ng

cn nbm B[c R ngha % cch th'c c h4nh ca cc le h9th0ng ny. Yi phDng th'c lm %i9c % cc c h4nh tDng 'ng /gip chng ta nbm B[c cD chd hot Bng % cc %n B& %& #$omt ca N=ch %Q ny cQ th % / /bc hDn. Ua By / t4nh#y cQ th cc hot Bng ca cc le/ cc ti9n ch % ccNeamon liJn an Bdn c h4nh h9 th0ng mng tJn 56I+.

2.3.1. Mt /0 le liJn an Bdn c h4nh mng % N=ch %Q

VilE AEtcAhosts

Oile ny ch'a tJn ho/tname tDng 'ng %Ti B=a ch IP ca nFNng cho %i9c chyn BHi IP aNNe//. hi #n Nng ho/name (CP)IP / /ot le )etc)ho/t/ B t4m B=a ch IP ca ho/t gi$/> #n 8h?ng Nng N=ch %Q 6Uu. C tc ni Nng ca le)etc)ho/t/ nh /a:

fNNe// ocial name alia/...

B=a ch Nomain name (Jn ho/t

NQ: 6i Nng le )etc)ho/t


19/104


IP aNNe// Nomain alia/

12K.7.7.1 localho/tgateVay.ViNget/.ca

1!2.KK.2*2.1 n#.ottaVa.net.ca

1;L.K3.13K.1 gateVay.ViNget/.ca ppp1

1;L.K3.13K.2 neVton.ViNget/.ca neVton

1;L.K3.13K.*7 gateVay.ViNget/.ca net2

}} ch Nng ghi ch.

VilE AEtcAEthErs

Ua 8hi #idt B[c B=a ch IP giao th'c (CP)IP / ph$i chyn

BHi B=a ch ny /ang B=a ch ethenet Bia ch %t lR cacaN mng - MfC aNNe//u B cc ho/t cF th nFi chy9n B[c %Tinha tong mng local. i9c chyn BHi ny cF th B[c th`chi9n #sng giao th'c f~P hoAc to #$ng B=a ch ethenet tongle )etc)ethe/

ethenet aNNe// ho/tname

7L:77:27:L^:!L:c laiNac

7L:77:27:L*:^*:; anht

77:^7:#7:a!:;N:!2 /alai 77:e7:1!:a3:!1:a7 Nong

77:N7:c;:7*:2^:^; eint

77:c7:!;:73:2^:^! goeNi

77:L7:2N:7;:;7:;2 lancNo

VilE AEtcAnEtForks


20/104


Oile ny ch'a mt #$ng Nanh /ch cc giao th'c hay B[c />NQng ca f~Pfu. Oile ny cng cp cc th?ng tin %& tJn potocol/0 potocol % cc # Nanh cho cc potocol ny.

6F cF Nng nh /a:

ip 7 IP intenet potocol p/eNo potocolnm#e

icmp 1 ICMP intenet contol me//agepotocol

ggp 3 ]]P gateVay-gateVay potocol

tcp ^ (CP tan/mi//ion contol potocol

egp L ]P e,teio gateVay potocol

pp 12 P5P Pf~C ni%e/al pac8et potocol

Np 1K 5P /e Natagam potocol

hmp 27 YMP ho/t monitoing potocol

,n/-iNp 22 +6U-IP+eo, 6U IP

Np 2K ~P }elia#le Natagam} potocol

VilE AEtcAsErvicEs

Oile ny ch'a mt #$ng Nanh /ch li9t 8J cc N=ch %Q m ho/tcF th chy. MGi N=ch %Q gvm cF: tJn N=ch %Q /0 pot tJn giaoth'c # Nanh.

/mtp 2*)tcp mail

time 3K)tcp tim/e%e

time 3K)Np tim/e%e

name !2)Np name/e%e

Vhoi/ !3)tcp nicname /ally to /i-nic

Nomain *3)NpNomain *3)tcp

#ootp/ ^K)Np j(P)YCP /e%e

#ootpc ^L)Np j(P)YCP client

ho/tname/ 171)tcp ho/tname /ally to /i-nic

pop2 17;)tcp pop-2 Po/t ce Potocol -2

VilE AEtcAinEt.conW


21/104


Oile ny B[c /> NQng B cng cp cc th?ng tin cho l9nh inetN.InetN nghe tJn pot (CP % #t cc tidn t4nh cn thidt 8hi 8dtn0i yJ c tJn pot BF. 6F tidt 8i9m ti ngyJn ca h9 th0ng#sng cch ch #t cc Nemone 8hi chng B[c gqi Bdn.

/e%icename tli poto ag/ /e/e%epathname ag/

Otp anN telnet ae /tanNaN Intenet /e%ice/.

tp /team tcp noVait oot )/)/#in)in.tpN in.tpN

telnet /team tcp noVait oot )/)/#in)in.telnetNin.telnetN

(nameN /e%e/ the o#/olete I6-11^ name /e%e potocol.

name Ngam Np Vait oot )/)/#in)in.tnameNin.tnameN

Uhell login e,ec com/at anN tal8 ae jU potocol/.

/hell /team tcp noVait oot )/)/#in)in./hN in./hN

login /team tcp noVait oot )/)/#in)in.loginNin.loginN

e,ec /team tcp noVait oot )/)/#in)in.e,ecNin.e,ecN

com/at Ngam Np Vait oot )/)/#in)in.com/atin.com/at

tal8 Ngam Np Vait oot )/)/#in)in.tal8N in.tal8N

M/t n a/ oot to eaN )etc)/haNoVuw }-n} tn/ oX loggingin tmp)Vtmp.

2.3.2. Mt /0 le liJn an Bdn hot Bng ty nhp %o h9 th0ng

Yai le cF tc Bng t lTn tTi %n B& 8im /ot ty nhp ca

h9 th0ng tr ,a BF l : etc)ho/t/.ei% % .ho/t/.


22/104


VilE AEtcAhosts.E`uiv

Oile ny ch'a mt Nanh /ch cc ho/t tin cy. Cc le ny B[c />NQng #i cc l9nh u nh : login cp cmN /h.

6i Nng ca le cF Nng /a:

localho/t

gateVay.ViNget/.ca

gateVay.ViNget/.ca

n#.ottaVa.net.ca

gateVay.ViNget/.ca

neVton.ViNget/.ca

gateVay.ViNget/.ca

VilE .rhosts

(9p .ho/t le B[c Nng tong th mQc home ca /e. 6F cF Rngha gi0ng nh le )etc)ho/t/.ei%. 6i Nng ca hai le cnggi0ng nha. Oile )etc)ho/t/.ei% cng cp /` ngang hng giZacc ho/t cn le .ho/t/ th4 cng cp /` ngang hng giZa cc/e.

U` ngang hng By cF ngha l tt c$ cc /e tJn cc ho/t

cF tJn tong le )etc)ho/t/.ei% gqi l cc t/teN ho/tu B& cFy&n ty cp %o my ngang hng nh cc accont ca chnhmy BF.

ChR a:le )etc)ho/t/.ei% 8h?ng B[c /> NQng cho /e oot.hi BF ch cF le .ho/t/ B[c ,> lR.

V d:

(a cF 2 my : ho/t Va##itw /e chae % ho/toeow/echae. 6d /e chae Bang login %o my Va##it % Nngl9nh :

login oeo

gi$ /> Va##it l t/teN ho/t ca oeou . hi BF /e chae /login %o oeo m 8h?ng #= h{i pa//VoN.

(ong le .ho/t/ cF thJm t\ng /e name cho php /e cFth login %Ti #t c' mt /e name no cF tong le )etc)pa//VN.

5/e ei%alence l mt cD chd a BF mt /e cF th B[c#idt tJn tt c$ cc my tJn mng. 6F gip cho ng\i $n t= mngmt cch N Nng hDn Bvng th\i nF cng t cn thidt 8hi Nng

h9 th0ng 6OU.


23/104


@ cong /e ei%alence. 5/e to mt le .ho/t/ tong thmQc home. Oile ny ch cho php ng\i ch le cF y&n ghi. Oileny ch'a tJn cc h9 th0ng theo Nng % ch'a /e B[cei%alence.

2.3.3. +em ,t mt /0 Naemon liJn an Bdn (CP)IP

SE=mon K_*0 UK_*0SX

eamon U6MP B[c ci BAt #i giao th'c $n lR intenetICMP. ]iao th'c ny cF 8h$ n"ng nhn th?ng tin tr U6MP agenttJn cc h9 th0ng 8hc t nhi& h9 th0ng 8h?ng ch'a phnm&m $n lR U6MP.

SE=mon bLb0 Ur=r7X

eamon apN B[c ci BAt B Bp 'ng giao th'c chynBHi B=a ch ~f~P. Cc h9 th0ng 8hc /> NQng ~f~P 8hi 8hiBng B t4m a B=a ch IP tr B=a ch thenet. My tnh 8hi8hi Bng / g>i B=a ch thenet ca nF tong #$n tin ~f~P. Y9th0ng chy apN m0n t$ l\i B[c #$n tin ny th4 cn ph$i cF tJn% B=a ch IP ca ho/t g>i tong le )etc)ho/t/ % #$ng map tJn -B=a ch ethenet tong le )etc)ethe/.

SE=mon 2oot7 U2oot7X

eamon ny B[c ci tJn /e%e chy giao th'c Intenet #ootpotocol. 6F B[c 8ch hot #i tidn t4nh inetN 8hi nhn B[c yJc #oot. Intenet #oot /e%e B[c thidt 8d B cng cp th?ng tincho client. 6F ch cF ch'c n"ng l tZ % cng cp th?ng tin ch'8h?ng cF ch'c n"ng hn chd cc client nh B=a ch clientnetma//8 #oaNca/t aNNe// Nomain /e%e aNNe// oteaNNe// etcu.

SEmon routE UroutEX

eamon oteN B[c gqi Bdn 8hi my 8hi Bng B $n lR#$ng oting ta#le. ~oteN /> NQng giao th'c th?ng tin tydn+eo, 6U B $n lR % cp nht th?ng tin %o #$ng otingta#le.


24/104


B[c to #sng tay #i cc nh $n t= mng #sng cch Nng l9nhote % th\ng 8h?ng B[c $n lR #i oteN.

SE=mon Som=in _=mE KErvicE Un=mEX

6ameN chy tJn Intenet omain 6ame /e%e % nF l cD

chd th' 2 cho php chyn BHi giZa ho/tname % B=a ch IP.eamon ny cF th chy theo nhi& 8i: pimay /econNaycaching % /la%e tz thc %o yJ c ca ng\i $n t= mng.6d 8h?ng Nng le )etc)ho/t/ th4 ph$i cong N=ch %Q Nomainname 6Uu % h9 th0ng Bi h{i 6U cng cp B=a ch IP choho/tname. 6d local 6U 8h?ng #idt B=a ch IP ca ho/t th4 ccmy ch tJn mi&n 8hc / B[c h{i tTi cho tTi 8hi nhn B[c B=a chIP tDng 'ng.

SE=mon KystEm oggEr UsyslogXeamon ny cF nhi9m %Q ghi log li cc #$n tin %& /` thay BHi

h9 th0ng NTi Nng le )etc)/y/log.con. MGi #$n tin B[c ghi li theotrng Nng tong le. eamon /y/log nhn cc th?ng tin g>i tTi nF% ghi li tong cc log le ca nF.

2.3.!. Mt /0 ti9n ch ca (CP)IP

Cc ti9n ch ny B[c /> NQng B $n t= mng (CP)IP. MQcny / B& cp tTi mt /0 l9nh B[c /> NQng B $n t= cc N=ch%Q (CP)IP tJn h9 th0ng. Cc l9nh ny cF th B[c chy #i /eth?ng th\ng hoAc /pe-/e.

nh 0ing

hi Nng l9nh ping nF / g>i mt gFi tin ICMP tr ho/t ny tTiho/t 8hc. @ tiJn nF g>i mt gFi tin ICMP echo-ee/t Bi % ch\nhn gFi tin ICMP echo- eply tr ho/t Bch t$ %&.

NQ /a minh ho cch Nng l9nh ping.

ping -/ 273.1^2.7.LL

PI6] 273.1^2.7.LL: *^ Nata #yte/

^! #yte/ om te/t.%nn.%n 273.1^2.7.LLu: icmp/e7. time1.m/





25/104


^! #yte/ om te/t.%nn.%n 273.1^2.7.LLu: icmp/e!. time7.m/

^! #yte/ om te/t.%nn.%n 273.1^2.7.LLu: icmp/e*. time7.m/

^! #yte/ om te/t.%nn.%n 273.1^2.7.LLu: icmp/e^. time7.m/

^! #yte/ om te/t.%nn.%n 273.1^2.7.LLu: icmp/eK. time7.m/

C

----273.1^2.7.LL PI6] Utati/tic/----

L pac8et/ tan/mitteN L pac8et/ ecei%eN 7 pac8et lo//

onN-tip m/u min)a%g)ma, 7)7)1


26/104


22!.7.7.7 273.1^2.7.;L 5 3 7 ip#7

Nealt 273.1^2.7.2*7 5] 7 ^3

12K.7.7.1 12K.7.7.1 5Y 7 KK! lo7

nh tr=cEroutE:


27/104


ip#7 gateVay.ViNget/.ca 2**.2**.2**.2**77:c7:!;:73:2^:^!


28/104


II. Cc v1n chung v 2!o m"t h thng v mngo BAc Bim ca mt h9 th0ng mng l nhi& ng\i /> NQng

% phn tn %& mAt B=a lR nJn %i9c #$o %9 cc ti ngyJn mtmt hoAc /> NQng 8h?ng h[p l9u tong m?i t\ng mng ph'c tphDn nhi& /o %Ti m?i t\ng mt my tnh BDn lk h[ac mt ng\i />NQng

Yot Bng ca ng\i $n t= h9 th0ng mng ph$i B$m #$o ccth?ng tin tJn mng l tin cy % /> NQng Bng mQc Bch B0i t-[ngw @vng th\i B$m #$o mng hot Bng Hn B=nh 8h?ng #= tnc?ng #i nhZng 8k ph hoi.

CF mt th`c td l 8h?ng mt h9 th0ng mng no B$m #$o lan ton ty9t B0i h9 th0ng #$o %9 chbc chbn Bdn B BinZa vi cng cF lc #= %? hi9 ho #i nhZng 8k ph

Phn /a By / t4nh #y mt /0 8hi ni9m liJn an Bdn#$o mt h9 th0ng mng Intenet m ng\i $n t= cn an tm% gi$i ydt.

1. Cc v#n $% v% an ninh mng

/./. *%t s khi nim v 2!o m"t(Tc 8hi t4m hi cc %n B& liJn an Bdn phDng th'c ph

hoi % cc #i9n php #$o %9 cng nh thidt lp cc chnh /ch %$o mt phn /a By / t4nh #y mt /0 8hi ni9m liJn anBdn #$o mt th?ng tin tJn mng Intenet.

1.1.1. @0i t[ng tn c?ng mng IntNeu:


29/104


c?ng cQ phn tch % Ne#g B ly B[c cc th?ng tincF gi t=

6hZng B0i t[ng tn c?ng mng cF th nhsm nhi& mQc Bch8hc nha: nh "n cbp nhZng th?ng tin cF gi t= %& 8inh td ph

hoi h9 th0ng mng cF ch B=nh hoAc cng cF th ch l nhZnghnh Bng %? R th'c th> nghi9m cc chDng t4nh 8h?ng 8imta c|n thn ...

1.1.2. Cc lG hHng #$o mt:

Cc lG hHng #$o mt l nhZng Bim yd 8m tJn h9 th0nghoAc |n ch'a tong mt N=ch %Q m N`a %o BF 8k tn c?ng cFth ,m nhp ti php B th`c hi9n cc hnh Bng ph hoihoAc chidm Bot ti ngyJn #t h[p php.

6gyJn nhn gy a nhZng lG hHng #$o mt l 8hc nha: cFth No lGi ca #$n thn h9 th0ng hoAc phn m&m cng cphoAc No ng\i $n t= yd 8m 8h?ng hi / /bc cc N=ch %Qcng cp ...

M'c B $nh hng ca cc lG hHng l 8hc nha. CF nhZng lGhHng ch $nh hng tTi cht l[ng N=ch %Q cng cp cF nhZng lGhHng $nh hng nghiJm tqng tTi ton # h9 th0ng ...

(ong phn 2 / t4nh #y chi tidt cc loi lG hHng #$o mt ccBim yd ca mt /0 N=ch %Q % #i9n php 8hbc phQc.

1.1.3. Chnh /ch #$o mt:

NQng cc ti ngyJn % N=ch %Q mng.

MQc tiJ ca chnh /ch #$o mt gip ng\i /> NQng #idt B[ctch nhi9m ca m4nh tong %i9c #$o %9 cc ti ngyJn th?ng tintJn mng Bvng th\i gip cc nh $n t= thidt lp cc #i9nphp #$o B$m hZ hi9 tong t4nh tang #= c h4nh8im /ot hot Bng ca h9 th0ng % mng

Mt chnh /ch #$o mt B[c coi l hon h$o nd nF ,y N`nggvm cc %"n #$n php i 8m theo cc c?ng cQ #$o mt hZhi9 % nhanh chFng gip ng\i $n t= pht hi9n ng"n chAncc ,m nhp ti php.

Chi tidt %& phDng php % cch th'c ,y N`ng mt chnh /ch#$o mt / B[c t4nh #y tong phn 3.

/.(. Och sY 2!o m"t mng v h thng:CF mt /0 /` 8i9n Bnh N cc hot Bng ph hoi tJn mng

tr BF n$y /inh cc yJ c %& #$o mt h9 th0ng nh /a:


30/104


- 6"m 1;LL: (Jn mng Intenet ,t hi9n mt chDng t4nh t`nhn phiJn #$n ca chnh nF lJn tt c$ cc my tJn mngIntenet. Cc chDng t4nh ny gqi l }/}. (y m'c B ngy hica nF 8h?ng lTn nhng nF BAt a cc %n B& B0i %Ti nh $n t=%& y&n ty nhp h9 th0ng cng nh cc lGi phn m&m. CD chdhot Bng ca }/} Intenet B[c minh ho tong h4nh /a:

*y t1n cng*y 2O t1n

cng

N#ch hot /sci7ts khc chyUC= trdn cc l5h6ng ci mail ca Mico/ot gy nhZng thidt hi8inh td 8h?ng nh{.

- 6"m 2777: Mt lot cc Se# Uite lTn nh yahoo.com %e#ay.com #= tJ li9t ngrng cng cp N=ch %Q tong nhi& gi\ No #=tn c?ng #i h4nh th'c oU.


31/104


/.(. *%t s hJnh th9c t1n cng mngCF th tn c?ng mng theo mt tong cc h4nh th'c /a By:

- `a %o nhZng lG hHng #$o mt tJn mng: 6hZng lG hHngny cF th l cc Bim yd ca N=ch %Q m h9 th0ng BF cng

cpw NQ nhZng 8k tn c?ng l[i NQng cc Bim yd tong ccN=ch %Q mail tp Ve# ... B ,m nhp % ph hoi

- U> NQng cc c?ng cQ B ph hoi: NQ /> NQng cc chDngt4nh ph 8ho mt 8h| B ty nhp %o h9 th0ng #t h[pphpw


32/104


- M'c 2 NQng Bvng th\i nhi& m'c #$o %9 8hc nha to thnhnhi& lTp }o chbn} B0i %Ti cc hot Bng ,m phm. i9c #$o%9 th?ng tin tJn mng ch yd l #$o %9 th?ng tin ct giZ tongcc my tnh BAc #i9t l tong cc /e%e ca mng. Y4nh /am? t$ cc lTp o chbn th?ng NQng hi9n nay B #$o %9 th?ng tinti cc tm ca mng

Inomation

Accessrights

login!"ass#or$

$ataencr%tion

Ph%sical"rotection

&ire#alls

$Jnh ' Cc m9c % 2!o v mng

6h minh ho tong h4nh tJn cc lTp #$o %9 th?ng tin tJn mnggvm:

-


33/104


phDng php #$o %9 phH #idn nht %4 nF BDn gi$n tt0n 8m % cng t cF hi9 $. MGi ng\i /> NQngm0n ty nhp B[c %o mng /> NQng cc ti ngyJnB& ph$i cF B"ng 8R tJn % mt 8h|. 6g\i $n t=h9 th0ng cF tch nhi9m $n lR 8im /ot mqi hotBng ca mng % ,c B=nh y&n ty nhp canhZng ng\i /> NQng 8hc tz theo th\i gian % 8h?nggian.

- NQng phH #idn phn NTiBy.

- i Bi

hoAc nhn %o %4 mt lR No no BF.

2. Cc 'h(ng thc m) hoMt tong nhZng #i9n php #$o mt th\ng /> NQng BF l p

NQng cc cD chd mE ho. Ua By / phn tch mt /0 cD chd mEho B$m #$o tnh an ton % tin cy NZ li9 th\ng B[c /> NQngtong cc N=ch %Q tJn mng Intenet

(./. c i;m chung c NQng mGi phDng th'c #$o mt cQ th.


34/104


- 6onepNiation - (nh 8h?ng th ph nhn. +c B=nhtnh ,c th`c ca ch th gy a hnh Bng

- f%aila#ility - h$ n"ng th`c hi9n phDng th'c #$o mtBF tong m?i t\ng % Bi& 8i9n th`c td.

2.1.1. fthentication:


35/104


2.1.3. ConNential:

@nh gi m'c B #$o mt hay tnh an ton B0i %Ti mGi phDngth'c #$o mt m'c B cF th phQc hvi NZ li9 tr nhZng ng\i8h?ng cF y&n B0i %Ti NZ li9 BF. CF th #$o mt NZ li9 theo

8idn tc enN-to-enN hoAc lin8-#y-lin8. Ti m? h4nh enN-to-enNNZ li9 B[c #$o mt tong ton # t4nh ,> lR l ty&n tJnmngw Ti m? h4nh lin8-#y-lin8 NZ li9 ch B[c #$o %9 tJn cc B-\ng ty&n %t lR

2.1.!. Integity:

(nh ton %nw hot Bng ny Bnh gi 8h$ n"ng />a BHi NZli9 /o %Ti NZ li9 ngyJn thy #an Bw Mt phDng th'c #$o mtcF tnh ton %n NZ li9 8hi nF B$m #$o cc NZ li9 mE hFa

8h?ng th #= thay BHi ni Nng /o %Ti ti li9 g0c 8hi BE B[cggi$i mEu % tong t\ng h[p nhZng 8k tn c?ng tJn mng />a BHini Nng NZ li9 BE mE hFa th4 8h?ng th 8h?i phQc li Nng #anB ca NZ li9.

2.1.*. 6oneptation:

(nh 8h?ng th ph nhnw +c B=nh tnh ,c th`c ca ch thgy a hnh Bng cF th`c hi9n #$o mt. NQ chZ 8R Bi9n t>/> NQng tong h9 th0ng Mail cho php ,c B=nh chnh ,c B0i t-[ng }8R}- ng\i g>i me//age BF.u

2.1.^. f%aila#ility:

@nh gi tnh th`c thi ca mt phDng th'c #$o mt. PhDngth'c #$o mt BF ph$i cF 8h$ n"ng th`c hi9n tong th`c td B0i %Ticc h9 th0ng my tnh NZ li9 % th`c hi9n %Ti cc ti ngyJnphn c'ng phn m&mw Bvng th\i ph$i B$m #$o cc yJ c %&t0c B tnh ton 8h$ n"ng chyn BHi tnh tDng thch giZacc h9 th0ng 8hc nha.

(.(. Cc 7h8ng th9c mf h=:

2.2.1. PhDng th'c mE hFa Nng 8ho # mt Uecet eyCytogaphyu

UD Bv /a By minh ho t4nh lm %i9c ca phDng th'cmE ho /> NQng 8ho # mt:


36/104


$Jnh ' 0h8ng th9c mf h= i \9ng

@y l phDng th'c mE ho B0i ,'ng: Me//age Nng Plainte,tNng Bqc B[cu B[c mE ho /> NQng Pi%ate ey 8ho m ch cFng\i mE ho mTi #idt B[cu to thnh me//age B[c mE hoCiphete,tu. pha nhn me//age mE ho B[c gi$i mE cng %TiPi%ate ey mE ho #an B thnh Nng Plainte,t.

@im ch R ca phDng php mE ho ny l %i9c /> NQng 8ho #

mt cho c$ t4nh mE ho % t4nh gi$i mE. o BF nh[cBim chnh ca phDng th'c ny l cn cF t4nh tao BHi8ho # mt Nn Bdn t4nh tng N #= l 8ho # mt

CF hai loi mE ho B0i ,'ng nh /a: ME ho theo trng 8h0i % mEho theo #it/ NZ li9.

- Cc tht ton mE ho B0i ,'ng theo trng 8h0i NZ li9 jloc8Cipheu th`c hi9n chia me//age Nng plainte,t thnh cc 8h0i %NQ ^! #it/ hoAc 2n #it/u /a BF tidn hnh mE ho trng 8h0i ny.@0i %Ti 8h0i c0i cng nd 8h?ng B ^! #it/ / B[c # thJm phn NZ

li9 B9m paNNingu. jJn nhn / th`c hi9n gi$i mE theo trng 8h0i.- ME ho theo trng #it/ NZ li9 Uteam Ciphe/u

j$ng /a By m? t$ mt /0 phDng php mE ho B0i ,'ng />NQng 8ho # mt

(Jn tht ton Chd B mE ho Chi& Ni 8ho

U (heo 8h0i *^

If (heo 8h0i 12L

~C2 (heo 8h0i 27!L

~C! (heo #it 27!L

~C* (heo 8h0i 27!L

@ 8hbc phQc Bim hn chd ca phDng php mE ho B0i ,'ngl t4nh tao BHi 8ho # mt ng\i ta BE /> NQng phDngphp mE ho phi B0i ,'ng /> NQng mt cAp 8ho tDng 'ng %Ti

nha gqi l phDng th'c mE ho phi B0i ,'ng Nng 8ho c?ng 8haiP#lic-ey Cytogaphyu.

ncytionPlainte,t Ciphete,t

ecytion

Pi%ate 8ey

Plainte,t


37/104


2.2.2. PhDng th'c mE hFa Nng 8ho c?ng 8hai P#lic-eyCytogaphyu

PhDng th'c mE hFa Nng 8ho c?ng 8hai B[c pht minh #i

ShitelN ie % Matin Yellman %o n"m 1;K*w PhDng th'c mEhFa ny /> NQng 2 8hFa l P#lic 8ey % Pi%ate ey cF cc anh9 ton hqc %Ti nha. (ong BF Pi%ate ey B[c giZ # mt %8h?ng cF 8h$ n"ng #= l No 8h?ng cn ph$i tao BHi tJn mngwP#lic 8ey 8h?ng ph$i giZ # mt % mqi ng\i B& cF th nhnB[c 8ho ny. o phDng th'c mE hFa ny /> NQng 2 8hFa 8hcnha nJn ng\i ta gqi nF l phDng th'c mE hFa phi B0i ,'ng. MAcN Pi%ate 8ey B[c giZ # mt nhng 8h?ng gi0ng %Ti }/ecet ey}B[c /> NQng tong phDng th'c mE hFa B0i ,'ng /> NQng 8ho #mt No Pi%ate ey 8h?ng B[c tao BHi tJn mng.

P#lic 8ey % Pi%ate 8ey tDng 'ng ca nF cF an h9 ton hqc%Ti nha % B[c /inh a /a 8hi th`c hi9n cc hm ton hqcw nhngcc hm ton hqc ny l?n tho$ mEn Bi& 8i9n l /ao cho 8h?ngth t4m B[c pi%ate 8ey tr p#lic 8ey % ng[c li. o BF mt cAp8ho p#lic 8ey % pi%ate 8ey tDng 'ng B[c gqi l 8ey pai.

o cF m0i an h9 ton hqc %Ti nha mt me//age B[c mE hFa#sng p#lic 8ey ch cF th gi$i mE B[c #sng pi%ate 8ey tDng'ngw mt me//age B[c mE hFa #sng pi%ate 8ey ch cF th gi$i mEB[c #sng p#lic 8ey tDng 'ng ca nF.

(ht ton P#lic 8ey cF tnh thn ngh=ch nd nF cF 8h$n"ng /> NQng c$ cho #$o mt % 8R Bi9n t>. 6F l 8h?ng cF tnhthn ngh=ch nd ch cF 8h$ n"ng 8R. Ti cc tht ton #t thnngh=ch pi%ate 8ey ch cF th mE hFa plainte,t t'c l t4nh8Ru m 8h?ng cF 8h$ n"ng gi$i mE ciphete,t. Mt loi 8hc catht ton mE hFa p#lic-8ey l hoAc 8h?ng th mE hFa hoAc8h?ng th 8Rw tht ton ny B[c gqi l tht ton 8ey e,changetht ton chyn BHi 8hFau.

(ht ton P#lic-8ey N`a tJn m0i an h9 ton hqc giZa

P#lic 8ey % pi%ate 8ey. j$ng /a By li9t 8J cc tht tFanp#lic-8ey th?ng NQng nh /a:

(Jn (ht ton (ype 6&n t$ng ton hqc

Uf igital /ignate (ht ton \i c

~Uf igital /ignate

ey ,change

(4m thra /0

- ~Uf l tJn ca 3 nh ton hqc BE t4m a phDng th'cmE hFa ny BF l ~i%e/t Uhami % fNleman. ~Uf l


38/104


tht ton p#lic-8ey th?ng NQng nht tr tTc tTi nay.~Uf cF th /> NQng c$ cho mE hFa 8R % 8eye,change. Chi& Ni ca 8ey cF th thay BHi th?ngth\ng tong phm %i tr *12 Bdn 27!L #it/. i9c l`achqn chi& Ni 8ey ph$i B$m #$o cn #sng giZa t0cB tnh ton % B ph'c tp ca phDng th'c mE hFa.

- Uf igital Uignate flgoithmu phDng th'c mE hFany B[c a B\i tr ch|n UU igital UignateUtanNaNu B[c giTi thi9 %o n"m 1;;!. Uf ch cFth 8R %o mt me//agew nF 8h?ng th Nng cho mEhFa #$o mt % 8ey e,change

CD chd lm %i9c ca phDng php mE ho /> NQng 8ho c?ng8hai B[c m? t$ #sng h4nh /a:

$Jnh ' 0h8ng th9c mf h= 7hi i \9ng

]i$ /> f m0n g>i cho j mt me//age B[c mE hFa theo phDngth'c p#lic-8ey. f /> NQng P#lic 8ey ca j B mE hFa Plainte,tto thnh ciphete,t f cF th nhn B[c P#lic ey ca j No P#licey l 8ho c?ng 8haiu . Ua BF ciphete,t ny B[c chyn tTi j. pha nhn j /> NQng pi%ate 8ey ca m4nh B gi$i mE Ciphete,t% Bqc B[c me//age #an B ca f.

o BF B th`c hi9n phDng th'c mE hFa Nng 8ho c?ng 8haicF mt /0 %n B& cn gi$i ydt nh /a:

- C h{i 1:


39/104


- (\ng h[p gi$ mo 8ho c?ng 8hai: n B& BAt a llm thd no B f cF th #idt chnh ,c P#lic 8ey mf /> NQng Bng l P#lic ey ca j. (ong t\ng h[pny nd gi$ mo j g>i P#lic 8ey ca Bdn f fnhn B[c P#lic 8ey l ca m 8h?ng ph$i l ca ju% f %n mE ho me//age ca m4nhw 8hi BF me//ageBdn / %n gi$i mE B[c No cF pi%ate 8ey cam4nh. @ 8hbc phQc hn chd ny ng\i ta ,y N`ngmt h9 th0ng cc tH ch'c th' #a BFng %ai t tnggian tong %i9c ,c th`c tn Bng Bbn ca mt P#licey. @F l cc tH ch'c ,y N`ng h9 th0ng ch'ng th`cBi9n t> tong phn 3 / t4nh #y 8x hDn %&Ceiticateu

- (\ng h[p /> NQng Pi%ate ey B mE ho: nd nh f />

NQng pi%ate 8ey ca m4nh B mE hFa mt me//age% g>i me//age BF tTi j hi BF j cF th /> NQngP#lic 8ey ca f B gi$i mE me//age tr f. Mt ng\i th'#a C cng cF P#lic 8ey ca f p#lic 8ey l mt 8hFac?ng 8haiu nJn nd nhn B[c me//age g>i tr f cng cFth gi$i mE B[c me//age % Bqc nF. o BF f 8h?ngth /> NQng pi%ate 8ey ca m4nh B mE hFa mtme//age. (y nhiJn N`a %o BAc Bim nh , 1:1giZa Pi%ate ey % P#lic ey ta cF th thy sngme//age B[c mE ho l B[c g>i tr f m 8h?ng ph$i l

mt ng\i 8hc. @i& ny cng t$ l\i cho c h{i 2.Mt hn chd ca phDng th'c mE hFa Nng 8ho c?ng 8hai l lm

gi$m t0c B th`c hi9n thao tc ,0ng tr 177 Bdn 1777 ln /o %TiphDng th'c mE hFa B0i ,'ng. o BF phDng th'c mE hFa ny tB[c /> NQng B mE hFa %Ti NZ li9 8ch thTc lTn. PhDng th'c nyth\ng B[c /> NQng cho giai Bon 8hi B ca 8dt n0i giZa haith`c th cn giao tidp %Ti nha % /a BF mt 8ho # mt/ecet 8eyu B[c to B th`c hi9n a t4nh tao BHi NZ li98ho # mt ny ch tvn ti tong mt /e//ion lm %i9c Ny

nhtu. i9c /> NQng 8x tht mE ho Nng Nng 8ho c?ng 8hai cho t4nh #bt tay giZa hai th`c th cn tao BHi th?ng tin cFyJ c #$o mt 8dt h[p %Ti tht ton Nng 8ho # mt cho t4nh tao BHi NZ li9 to thnh mt phDng th'c mE hFa lai. @th`c hi9n B[c phDng th'c mE ho lai 6et/cape BE Ba a giao th'cUU< th`c hi9n cc t4nh tJn. Phn 3 t4nh #y %& to 8dt n0i#$o mt / t4nh #y 8x hDn %& %n B& ny.

_a cc phn tch tJn chng ta thy sng cF hai 8h$ n"ngcn ph$i 8hbc phQc 8hi /> NQng phDng th'c mE hFa N`a tJn n&nt$ng P#lic 8ey BF l:


40/104


- 6d /> NQng P#lic 8ey B mE hFa mt me//age th4B$m #$o me//age BF l hon ton #$o mtw nhng cnph$i 8im ta tnh ,c th`c ca p#lic 8ey 1u

- 6d /> NQng Pi%ate 8ey B mE hFa mt me//age th4

cF th gi$i mE B[c #i nhi& ng\i cF B[c p#lic 8eyw nh-ng li cF th /> NQng phDng th'c ny B 8im ta tnh,c th`c ca mt ng\i 8R %o me//age BF. 2u

n B& BAt a l cF th tn NQng B[c hai BAc Bim ny BB$m #$o phiJn giao N=ch l hon ton #$o mt % tin cy. CQ thnh /a:

- 6g\i ta / /> NQng pi%ate 8ey B 8R %o mt me//agewm ni Nng ca me//age ny l p#lic 8ey ca ng\iBF. _ t4nh ny B$m #$o B[c sng p#lic 8ey Bng

l ca ng\iw Bi& ny 8hbc phQc B[c nh[c Bim 1u BEnJ tJn.

- Ua BF mt me//age B[c mE hFa #sng p#lic 8ey %rag>i Bdn B$m #$o sng ch cF ng\i cF pi%ate 8ey canF mTi cF 8h$ n"ng gi$i mE B[c. @i& ny 8hbc phQc B-[c nh[c Bim 2u BE nJ tJn.

2.2.3. PhDng th'c mE ho mt chi& - tht ton j"m

@ B$m #$o tnh ton %n ca NZ li9 8h?ng #= thay BHi /o

%Ti NZ li9 #an B ng\i ta Ba a cc phDng th'c mE ho mtchi& /> NQng cc tht ton j"m . Yot Bng ca phDng th'c mEho ny B[c minh ho tong h4nh /a:

$Jnh ' *f h= m%t chiu

Y4nh tJn m? t$ hot Bng ca phDng th'c mE hFa 1 chi&Me//age - ige/tuw (heo BF B a ca phDng th'c ny l mtMe//age ige/t cF chi& Ni c0 B=nh me//age ny gqi lme//age Nige/t hoAc Nige/t hoAc ha/hu. Ti mGi B %oPlainte,t / ch cF Ny nht mt 8dt $ B a tDng 'ng % trMe//age ige/t 8h?ng th t4m a Me//age Nng Plainte,t #anB. Me//age Nng Plain te,tu /a 8hi th`c hi9n hm ha/hing /to a mt chGi cc 8R t` - BAc tng cho me//age B %o. ]i$itht me//age Nige/t l mt thn ton mt chi& hay th\ng gqi

l tht ton ha/h. PhDng th'c mE hFa ny 8h?ng /> NQng B mE

one-Vaynction

Plain te,t Me//ageNige/t ha/hu


41/104


hFa NZ li9 m th\ng /> NQng B 8im ta tnh ton %n ca NZli9 tong t4nh ty&n th?ng tin tJn mng.

Cc tht ton ha/hing cF 3 BAc Bim chnh nh /a:

- h?ng cF 8h$ n"ng to a me//age #an B N`a tJn

Nige/t ca nF nFi cch 8hc l tht ton ha/hing ph$iB$m #$o cF tnh mt chi& 8h?ng th th`c hi9n theochi& ng[c liu

- h?ng th t4m a mt me//age g0c tr mt Nige/t BAc#i9t

- h?ng th t4m 2 me//age 8hc nha cF cng mtNige/t gi0ng nha

6d chi& Ni ca Nige/t l m #it/ nF / cn ph$i th> 2m

me//age B t4m a mt me//age %Ti Nige/t mong m0n tDng'ng % th`c hi9n 2m)2mee/age B t4m 2 me//age cF cng mtNige/t. o BF cc hm th`c hi9n me//age-Nige/t ph$i cF B at nht l 12L #it/ %4 t0i thi l 2 ^!l 8h?ng th tnh ton B[c%Ti cc 8h$ n"ng tnh ton hi9n nay. j$ng /a By m? t$ mt /0tht ton ha/hing th\ng /> NQng:

(ht ton Chi& Ni ca Nige/t #it/u

M2 12L

M! 12L

M* 12L

UYf-1 1^7

UYf 1^7

2.2.! Me//age fthentication CoNe/ - MfC

MfC l mt NZ li9 cF chi& Ni c0 B=nh B[c g>i cng %Ti mtme//age B 8im ta tnh ton %n NZ li9 ca me//age BF.Cc phDng th'c mE hFa Nng 8hFa # mt % 8hFa c?ng 8hai cF

th B[c /> NQng nh l n&n t$ng ca %i9c to cc MfC/. Mt cchth?ng NQng B to MfC l Nng nh\ mt #loc8 ciphe te,t mtBon te,t BE B[c mE hFa u B[c to tr phDng th'c mE hFa B0i ,'ng/> NQng 8hFa # mt. Cc giao N=ch ti chnh tJn mng BE />NQng phDng th'c ny mt th\i gian Ni B #$o %9 cc giao N=chBi9n t> giZa cc nh #an8 tJn mng. Mt hm mE hFa ha/hing B-[c /> NQng 8dt h[p giZa mt me//age % mt 8hFa # mt B toa MfC. pha ng\i nhn me//age ch R ng\i ny Nng chng8hFa # mt %Ti pha ng\i g>iu tnh ton ha/h theo NZ li9 g>iBdn cng %Ti 8hFa # mt ca hq B to thnh mt MfC 8hc.6d 2 MfC ny tng %Ti nha ng\i nhn / 8dt ln sng me//ageBF l B[c g>i tr mt ng\i m ng\i BF BE #idt 8hFa # mt %


42/104


me//age BF hon ton 8h?ng #= />a chZa tong 8hi ty&n NZli9. _ t4nh ny B[c gqi l hm 8ey/ ha/h % tDng 'ng %Ti nFMfC B[c gqi l YMfC


43/104

!o m"t h thng v mng my t#nh 0h-n (

0h-n ( ' Cc l5 h6ng v 7h8ng th9c t1n cng mng7h6 2in

I. Cc l5 h6ng v i;m yu c NQng hoAc cho php cc ty nhp8h?ng h[p php %o h9 th0ng. Cc lG hHng cng cF th nsm ngaycc N=ch %Q cng cp nh /enNmail Ve# tp ... 6goi a cc lGhHng cn tvn ti ngay chnh ti h9 Bi& hnh nh tong SinNoV/

6( SinNoV/ ;* 56I+w hoAc tong cc 'ng NQng m ng\i /> NQngthDng ,yJn /> NQng nh SoN poce//ing Cc h9 Nata#a/e/...Phn /a By / t4nh #y cc lG hHng #$o mt th\ng gAp tJnmt /0 h9 th0ng.

/./. 0hn loi l5 h6ng 2!o m"t:CF nhi& tH ch'c 8hc nha tidn hnh phn loi cc Nng lG

hHng BAc #iJt. (heo cch phn loi ca j 0c phng Mx ccloi lG hHng #$o mt tJn mt h9 th0ng B[c chia nh /a:

-


44/104


$Jnh ' Cc loi l5 h6ng 2!o m"t v m9c % ngy hi;mUa By / phn tch mt /0 lG hHng #$o mt th\ng ,t

hi9n tJn mng % h9 th0ng

1.1.1 Cc lG hHng loi C:

Cc lG hHng loi ny cho php th`c hi9n cc cc tn c?ngoU.

oU l h4nh th'c tn c?ng /> NQng cc giao th'c tng

Intenet tong # giao th'c (CP)IP B lm h9 th0ng ngng t9 NnBdn t4nh tng tr ch0i ng\i /> NQng h[p php ty nhp hay />NQng h9 th0ng. Mt /0 l[ng lTn cc gFi tin B[c g>i tTi /e%e tong8ho$ng th\i gian liJn tQc lm cho h9 th0ng t nJn t$i 8dt $l /e%e Bp 'ng chm hoAc 8h?ng th Bp 'ng cc yJ c trclient g>i tTi.

Cc N=ch %Q cF ch'a B'ng lG hHng cho php cc th`c hi9n cccc tn c?ng oU cF th B[c nng cp hoAc />a chZa #sng ccphiJn #$n mTi hDn ca cc nh cng cp N=ch %Q. Yi9n nay cha cFmt gi$i php ton Ni9n no B 8hbc phQc cc lG hHng loi ny%4 #$n thn %i9c thidt 8d giao th'c tng Intenet IPu nFi iJng% # giao th'c (CP)IP BE ch'a B`ng nhZng ngy cD ti&m tngca cc lG hHng ny.

Mt % NQ Bin h4nh ca phDng th'c tn c?ng oU l %o mt/0 Se# Uite lTn lm ngng t9 hot Bng ca Ve# /ite ny: nhVVV.e#ay.com % VVV.yahoo.com

(y nhiJn m'c B ngy him ca cc lG hHng loi ny B[c ,dploi Cw t ngy him %4 chng ch lm gin Bon cng cp N=ch%Q ca h9 th0ng tong mt th\i gian m 8h?ng lm ngy hi BdnNZ li9 % nhZng 8k tn c?ng cng 8h?ng Bt B[c y&n tynhp #t h[p php %o h9 th0ng.


45/104


Mt lG hHng loi C 8hc cng th\ng thy BF l cc Bim ydca N=ch %Q cho php th`c hi9n tn c?ng lm ngng t9 h9 th0ngca ng\i /> NQng c0iw Ch yd %Ti h4nh th'c tn c?ng ny l />NQng N=ch %Q Se#. ]i$ />: tJn mt Se# Ue%e cF nhZng tangSe# tong BF cF ch'a cc Bon mE a%a hoAc a%aUcipt/ lm}teo} h9 th0ng ca ng\i /> NQng t4nh Ny9t Se# ca 6et/cape#sng cc #Tc /a:

- idt cc Bon mE B nhn #idt B[c Se# joVe/ /> NQng6et/cape

- 6d /> NQng 6et/cape / to mt %ng lAp %? th\i hn /inha %? /0 cc c>a /H tong mGi c>a /H BF n0i Bdn cc Se# Ue%e8hc nha.

Ti mt h4nh th'c tn c?ng BDn gi$n ny cF th lm teo h9

th0ng tong 8ho$ng th\i gian !7 giy B0i %Ti my client cF ^! Mj~fMu. @y cng l mt h4nh th'c tn c?ng 8i oU. 6g\i /> NQngtong t\ng h[p ny ch cF th 8hi Bng li h9 th0ng.

Mt lG hHng loi C 8hc cng th\ng gAp B0i %Ti cc h9 th0ngmail l 8h?ng ,y N`ng cc cD chd anti-elay ch0ng elayu chophp th`c hi9n cc hnh Bng /pam mail. 6h chng ta BE #idtcD chd hot Bng ca N=ch %Q th Bi9n t> l l % chyn tidpwmt /0 h9 th0ng mail 8h?ng cF cc ,c th`c 8hi ng\i Nng g>i thNn Bdn t4nh tng cc B0i t[ng tn c?ng l[i NQng cc my chmail ny B th`c hi9n /pam mailw Upam mail l hnh Bng nhsmtJ li9t N=ch %Q mail ca h9 th0ng #sng cch g>i mt /0 l[ng lTn ccme//age/ tTi mt B=a ch 8h?ng ,c B=nh %4 my ch mail l?nph$i t0n n"ng l`c Bi t4m nhZng B=a ch 8h?ng cF th`c Nn Bdnt4nh tng ngng t9 N=ch %Q. U0 l[ng cc me//age/ cF th /inh atr cc chDng t4nh lm #om th t phH #idn tJn mng Intenet.

1.1.2. Cc lG hHng loi j:


46/104


UenNmail l mt chDng t4nh B[c /> NQng t phH #idn tJnh9 th0ng 56I+ B th`c hi9n g>i th Bi9n t> cho nhZng ng\i />NQng tong ni # mng. (h?ng th\ng /enNmail l mt Naemonchy chd B n&n B[c 8ch hot 8hi 8hi Bng h9 th0ng. (ongtng thi hot Bng /enNmail m pot 2* B[i mt yJ c tTi /th`c hi9n g>i hoAc chyn tidp th.

UenNmail 8hi B[c 8ch hot / chy NTi y&n oot hoAc y&ntDng 'ng %4 liJn an Bdn cc hnh Bng to le % ghi log leu. NQng th?ng th\ng cF th Bqc B[c niNng ca le )etc)pa//VN /a BF g>i mail Bdn B=a chenecil.com. 4 /enNmail hot Bng NTi y&n oot nJn nF cFth Bqc B[c ni Nng le )etc)pa//VNw mAt 8hc l[i NQng lG hHng#$o mt ca /enNmail %n #t chd B Ne#g cho php m mtle hanNle )#in)mail B g>i mail tTi B=a ch enecil.com
mailto:[email protected]:[email protected]:[email protected]:[email protected]


47/104


@ 8hbc phQc lGi ca /enNmail cn tham gia cc nhFm tin %$o mtw %4 /enNmail l chDng t4nh cF 8h nhi& lGiw nhng cngcF nhi& ng\i /> NQng nJn cc lG hHng #$o mt th\ng B[c phthi9n % 8hbc phQc nhanh chFng. hi pht hi9n lG hHng tong/enNmail cn nng cp thay thd phiJn #$n /enNmail Bang />NQng.

Mt loi cc %n B& 8hc %& y&n /> NQng chDng t4nh tJn56I+ cng th\ng gy nJn cc lG hHng loi j. 4 tJn h9 th0ng56I+ mt chDng t4nh cF th B[c th`c thi %Ti 2 8h$ n"ng:

- 6g\i ch / hZ chDng t4nh BF 8ch hot chy

- 6g\i mang y&n ca ng\i / hZ le BF

CF th th`c hi9n B[c cD chd th' hai th?ng a %i9c /etgiN %/etiN. NQ /enNmail % mt lot cc chDng t4nh 8hc cn ph$i

/et chd B ny %4 ng\i /> NQng th?ng th\ng %n ph$i chy/enNmail nhng 8hi /enNmail chy th4 nF ph$i cF y&n ootu cQth nh /a:

-V/-,-- oot oot /enNmail

6h %y ng\i Nng 8ch hot /enNmail chy th4 nF / mangy&n oot %4 No BE /et #it/ phn ngD4 / hZ chDng t4nh/enNmail.

@i& ny / t ngy him nd nh cc chDng t4nh /hell nh

#in)/h /)#in)c/h ...u B[c /et cc #it/ y&n oot %4 8hi BF ng-\i /> NQng login %o h9 th0ng / cF y&n nh y&n oot B0i %Timqi le tJn h9 th0ng.

NQng mt %ng B9m - l mt %ng tong # nhT /> NQng

B l NZ li9 tTc 8hi ,> lR. 6hZng ng\i lp t4nh th\ng /> NQng%ng B9m tong # nhT tTc 8hi gn mt 8ho$ng 8h?ng gian # nhTcho trng 8h0i NZ li9. NQ ng\i /> NQng %idt chDng t4nh nhpt\ng tJn ng\i /> NQngw i B=nh t\ng ny Ni 27 8R t`. o BFhq / 8hai #o:

cha /tname 27w

Ti 8hai #o ny cho php ng\i /> NQng nhp %o t0i Ba 27 8Rt`. hi nhp NZ li9 tTc tiJn NZ li9 B[c l %ng B9mw nd ng\i/> NQng nhp %o 3* 8R t`w / ,$y a hi9n t[ng tn %ng B9m %

8dt $ 1* 8R t` N thra / nsm mt %= t 8h?ng 8im /ot B[ctong # nhT. @0i %Ti nhZng 8k tn c?ng cF th l[i NQng lG hHng ny


48/104


B nhp %o nhZng 8R t` BAc #i9t B th`c thi mt /0 l9nhBAc #i9t tJn h9 th0ng. (h?ng th\ng lG hHng ny th\ng B[c l[iNQng #i nhZng ng\i /> NQng tJn h9 th0ng B Bt B[c y&noot 8h?ng h[p l9.

i9c 8im /ot chAt ch c h4nh h9 th0ng % cc chDngt4nh / hn chd B[c cc lG hHng loi j.

1.1.3. Cc lG hHng loi f:

Cc lG hHng loi f cF m'c B t ngy himw Be Nqa tnh ton%n % #$o mt ca h9 th0ng. Cc lG hHng loi ny th\ng ,thi9n nhZng h9 th0ng $n t= yd 8m hoAc 8h?ng 8im /otB[c c h4nh mng.

Mt % NQ th\ng thy l tJn nhi& h9 th0ng /> NQng Se#

Ue%e l fpache @0i %Ti Se# Ue%e ny th\ng c h4nh th mQcmAc B=nh B chy cc /cipt/ l cgi-#inw tong BF cF mt Ucipt/B[c %idt /n B th> hot Bng ca apache l te/t-cgi. @0i %Ti ccphiJn #$n c ca fpache tTc %e/ion 1.1u cF Nng /a tong lete/t-cgi:

echo _5~U(~I6] _5~U(~I6]

jidn m?i t\ng _5~U(~I6] No 8h?ng B[c BAt tong cFN } oteu nJn 8hi pha client thc hi9n mt yJ c tong BFchGi 8R t` g>i Bdn gvm mt /0 8R t` BAc #i9tw % NQ 8R t` }}

Ve# /e%e / t$ %& ni Nng ca ton # th mQc hi9n th\i l ccth mQc ch'a cc /cipt/ cgiu. 6g\i /> NQng cF th nh4n thy ton# ni Nng cc le tong th mQc hi9n th\i tJn h9 th0ng /e%e.

Mt % NQ 8hc cng ,$y a tDng t` B0i %Ti cc Se# /e%echy tJn h9 Bi& hnh 6o%ellw Cc Ve# /e%e ny cF mt /cipt/l con%et.#a/ chy /cipt/ ny cho php Bqc ton # ni Nngcc le/ tJn h9 th0ng.

6hZng lG hHng loi ny hdt /'c ngy him %4 nF BE tvn ti/n cF tJn phn m&m /> NQngw ng\i $n t= nd 8h?ng hi

/ %& N=ch %Q % phn m&m /> NQng / cF th #{ a nhZngBim yd ny.

@0i %Ti nhZng h9 th0ng c th\ng ,yJn ph$i 8im ta cc th?ng#o ca cc nhFm tin %& #$o mt tJn mng B pht hi9n nhZnglG hHng loi ny. Mt lot cc chDng t4nh phiJn #$n c th\ng />NQng cF nhZng lG hHng loi f nh: O(P ]ophe (elnet UenNmailf~P nge...

/.(. !nh h,ng c


49/104


ny B to a nhZng lG hHng 8hc to thnh mt chGi mbt ,chnhZng lG hHng. NQ mt 8k ph hoi m0n ,m nhp %o h9th0ng m anh ta 8h?ng cF ti 8ho$n ty nhp h[p l9 tJn h9th0ng BF. (ong t\ng h[p ny tTc tiJn 8k ph hoi / t4m a ccBim yd tJn h9 th0ng hoAc tr cc chnh /ch #$o mt hoAc/> NQng cc c?ng cQ N /t th?ng tin nh Uf(f6 IUUu tJn h9th0ng BF B Bt B[c y&n ty nhp %o h9 th0ngw /a 8himQc tiJ nh nht BE Bt B[cw 8k ph hoi cF th tidp tQc t4m hicc N=ch %Q tJn h9 th0ng nbm #bt B[c cc Bim yd % th`chi9n cc hnh Bng ph hoi tinh %i hDn.

(y nhiJn cF ph$i #t 8z lG hHng #$o mt no cng ngy himBdn h9 th0ng hay 8h?ng CF t nhi& th?ng #o liJn an BdnlG hHng #$o mt tJn mng Intenet h hdt tong /0 BF l cc lGhHng loi C % 8h?ng BAc #i9t ngy him B0i %Ti h9 th0ng.

NQ 8hi nhZng lG hHng %& /enNmail B[c th?ng #o tJn mng8h?ng ph$i ngay lp t'c $nh hng tJn ton # h9 th0ng. hinhZng th?ng #o %& lG hHng B[c 8hng B=nh chbc chbn ccnhFm tin / Ba a mt /0 phDng php B 8hbc phQc h9 th0ng.

(Jn mng Intenet cF mt /0 nhFm tin th\ng th$o ln %& ccch B& liJn an Bdn cc lG hHng #$o mt BF l:

- C~( Compte megency ~epon/e (eamu: 6hFm tinny h4nh thnh n"m 1;LL /a 8hi cF phDng th'c tnc?ng Som / - / t4nh #y phn /au ,t hi9n

tJn mng Intenet. 6hFm tin ny th\ng th?ng #o %Ba a cc t[ gip liJn an Bdn cc lG hHng #$o mt.6goi a nhFm tin cn cF nhZng #o co th\ng niJn B8hydn ngh= ng\i $n t= mng %& cc %n B& liJnan Bdn #$o mt h9 th0ng. @=a ch Se# /ite canhFm tin: http:))VVV.cet.og

- CIfC epatment o negy Compte InciNentfN%i/oy Capa#ilityu: CIfC B[c thnh lp %o n"m 1;L;tH ch'c ny ,y N`ng mt cD / NZ li9 liJn an

Bdn #$o mt cho # n"ng l[ng ca Mx. (h?ng tin caCIfC B[c Bnh gi l mt 8ho NZ li9 By B nht %&cc %n B& liJn an Bdn #$o mt h9 th0ng. @=a chVe# /ite ca CIfC : http:))ciac.llnl.go%

- OI~U( (he Oom o InciNent ~e/pon/e anN Uecity(eam/u: @y l mt Nin Bn liJn 8dt nhi& tH ch'c ,Ehi % t nhn lm %i9c t4nh ngy9n B gi$i ydtcc %n B& %& an ninh ca mng Intenet. @=a ch Se#/ite ca OI~U(: http:))VVV./t.og. Mt /0 thnh %iJnca OI~U( gvm:

CIfC


50/104


6fUf ftomateN Uy/tem/ InciNent ~e/pon/eCapa#ility

PNe 5ni%e/ity Compte megency~e/pon/e (eam

UtanoN 5ni%e/ity Uecity (eam

IjM megency ~e/pon/e (eam

/.3. Cc 2in 7h7 7ht hin h thng 2O t1n cng:h?ng cF mt h9 th0ng no cF th B$m #$o an ton ty9t

B0iw #$n thn mGi N=ch %Q B& cF nhZng lG hHng #$o mt ti&mtng. @'ng tJn gFc B ng\i $n t= h9 th0ng ngoi %i9c t4mhi pht hi9n nhZng lG hHng #$o mt cn l?n ph$i th`c hi9n

cc #i9n php 8im ta h9 th0ng ,em cF N hi9 tn c?ng hay8h?ng. Cc #i9n php BF l:

- im ta cc N hi9 h9 th0ng #= tn c?ng: h9 th0ngth\ng #= teo hoAc #= ca/h #sng nhZng th?ng #o lGi8h?ng ng. hF ,c B=nh ngyJn nhn No thidth?ng tin liJn an. (Tc tiJn ,c B=nh cc ngyJnnhn %& phn c'ng hay 8h?ng nd 8h?ng ph$i phnc'ng hEy ngh Bdn 8h$ n"ng my #= tn c?ng

- im ta cc ti 8ho$n ng\i Nng mTi tJn h9 th0ng: mt

/0 ti 8ho$n l nht l iN ca ti 8ho$n BF 7- im ta ,t hi9n cc tp tin l. (h\ng pht hi9n th?ng

a cch BAt tJn cc t9p tin mGi ng\i $n t= h9th0ng nJn cF thFi en BAt tJn tp tin theo mt mnht B=nh B N Nng pht hi9n tp tin l. ng ccl9nh l/ -l B 8im ta thc tnh /etiN % /etgiN B0i%Ti nhZng tp tinh Bng ch R BAc #i9t l cc tp tin/cipt/u.

- im ta th\i gian thay BHi tJn h9 th0ng BAc #i9t l

cc chDng t4nh login /h hoAc cc /cipt/ 8hi Bngtong )etc)init.N )etc)c.N ...

- im ta hi9 n"ng ca h9 th0ng. U> NQng cc ti9n chtheo Ni ti ngyJn % cc tidn t4nh Bang hot BngtJn h9 th0ng nh p/ hoAc top ...

- im ta hot Bng ca cc N=ch %Q m h9 th0ng cngcp. Chng ta BE #idt sng mt tong cc mQc Bchtn c?ng l lm cho tJ li9t h9 th0ng h4nh th'c tnc?ng oUu. U> NQng cc l9nh nh p/ p/tat cc ti9n ch

%& mng B pht hi9n ngyJn nhn tJn h9 th0ng.


51/104


- im ta ty nhp h9 th0ng #sng cc accont th?ngth\ng B& phng t\ng h[p cc accont ny #= tynhp ti php % thay BHi y&n hn m ng\i />NQng h[p php 8h?ng 8im /Fat B[c.

- im ta cc le liJn an Bdn c h4nh mng % N=ch%Q nh )etc)inetN.conw #{ cc N=ch %Q 8h?ng cn thidtwB0i %Ti nhZng N=ch %Q 8h?ng cn thidt chy NTi y&noot th4 8h?ng chy #sng cc y&n yd hDnw % NQngeN ch chy %Ti y&n no#oNy.

- im ta cc phiJn #$n ca /enNmail )#in)mail tpngeNw tham gia cc nhFm tin %& #$o mt B cFth?ng tin %& lG hHng ca N=ch %Q /> NQng

Cc #i9n php ny 8dt h[p %Ti nha to nJn mt chnh /ch %$o mt B0i %Ti h9 th0ng. Chi tidt %& phDng th'c % 8d hoch,y N`ng mt chnh /ch #$o mt / B[c t4nh #y tong phn#a - ,y N`ng chnh /ch #$o mt.

2. Mt - $i/m 0u ca h thng

(./. SE=mon DngEr:Mt lG hHng ca Neamon ngeN l cD hi B phDng th'c tn

c?ng Vom }/} tJn Intenet pht tinw @F l lGi tn %ng B9mtong cc tidn t4nh ngeN lGi 8hi lp t4nhu. ng B9m B lchGi 8R t` nhp B[c giTi hn l *12 #yte/. (y nhiJn chDng t4nhngeN 8h?ng th`c hi9n 8im ta NZ li9 B %o 8hi lTn hDn *12#yte/ tTc 8hi nF B[cthi hnh. dt $ l ,$y a hi9n t[ng tn NZli9 %ng B9m 8hi NZ li9 lTn hDn *12 #yte/. Phn NZ li9 Nthra ch'a nhZng Bon mE B 8ch mt /cipt 8hc hot Bngw/cipt/ ny tidp tQc th`c hi9n nge tTi mt ho/t 8hc. dt $ lh4nh thnh mt mbt ,ch cc }/} tJn mng Intenet.

(.(. VilE hosts.E`uiv:6d mt ng\i /> NQng B[c ,c B=nh tong le ho/t.ei% cng

%Ti B=a ch my ca ng\i BF th4 ng\i /> NQng BF B[c php tynhp tr ,a %o h9 th0ng BE 8hai #o. (y nhiJn cF mt lG hHng8hi th`c hi9n ch'c n"ng ny BF l nF cho php ng\i ty nhp tr,a cF B[c y&n ca #t c' ng\i no 8hc tJn h9 th0ng. NQnd tJn my f cF mt le )etc)ho/t.ei% cF Nng B=nh Nanh jWlie th4 Wlie tJn j cF th ty nhp %o h9 th0ng f % cF #tB[c y&n ca #t c' ngTi no 8hc tJn f. @y l No lGi ca th

tQc /eo8u tong th %i9n li#c 8hi lp t4nh.


52/104


(.3. Th m+c Av=rAm=il6d th mQc )%a)mail B[c thidt lp %Ti y&n B[c ghi

Vitea#leu B0i %Ti tt c$ mqi ng\i tJn h9 th0ng th4 #t c' ai cFth to le tong th mQc ny. Ua BF to mt le lin8 %Ti l tJn ca

mt ng\i BE cF tJn h9 th0ng lin8 tTi mt le tJn h9 th0ng th4cc th tTi ng\i /> NQng cF tJn tng %Ti tJn le lin8 / B[c gn thJm%o tong le m nF lin8 tTi.

NQ mt ng\i /> NQng to lin8 tr )%a)mail)oot tTi)etc)pa//VN /a BF g>i mail #sng tJn mt ng\i mTi tTi oot th4 tJnng\i /> NQng mTi ny / B[c gn thJm %o tong le )etc)pa//VNwo %y th mQc )%a)mail 8h?ng #ao gi\ B[c /et %Ti y&nVitea#le.

(.>. Ch9c n4ng 7ro\y c


53/104


6goi a thDng mi Bi9n t> pht tin N`a tJn n&n t$ng lN=ch %Q Se# cc th?ng tin tao BHi yJ c ph$i #$o mt tcao. o %y #$o mt N=ch %Q Se# l hdt /'c cn thidt. (Tc 8hiphn tch cc Bim yd %& #$o mt ca N=ch %Q Se# phn /aBy t4nh #y ngyJn tbc hot Bng ca N=ch %Q ny.

3.(. 0h8ng th9c hot %ng ci tTi /> NQng.

- Bc ":Ue%e /a BF g>i t$ li mt Bp 'ng Y((P. Mt

phn ca Bp 'ng ny gvm mt Nng tng thi m? t$


54/104


yJ c Y((P ca client g>i Bdn cF Bp 'ng thnhc?ng hay 8h?ng.

- Bc =:hi t4nh Ny9t Se# nhn B[c Bp 'ng Y((P8dt n0i (CP)IP #= BFng li phiJn lm %i9c Y((P 8dt

thc.

3.3. Cc v1n 2!o m"t i vQi Och v+ [E2

3.3.1. Ch|n C]I Common ]ateVay Inteaceu:

C]I l mt ch|n B[c 6CUf Ba a hG t[ tong cc Ve# /e%ehttpN ca 6CUf. MQc tiJ ca C]I l hG t[ mt cch m&m Nko %m ng cc ch'c n"ng ca Se# Ue%e. Cho php ,y N`ng mt

tang Se# %Ti nhi& th?ng tin }Bng} hDn /a mt th\i gian phttin ch|n ny BE Bp 'ng B[c cc mQc tiJ B& a. C]I cng lch|n B tiJn m ng cc ch'c n"ng ca mt Se# Ue%e.

M? h4nh hot Bng ca ch|n C]I B[c minh hqa tong h4nh/a:

Client(''' ro#ser)

Client

(''' ro#ser)

TTP

Ser*er

TTP

Ser*er

C+I

Program

C+I

ProgramIn"ut *ia TM, &orm

TTP res"onse an$

C+I out"ut (A)

In"ut an$

en*iromental *ariales

Full TTP res"onse an$ &ormatte$ out"ut (B)

Path A- Regular C+I

Path B- P (non."arse$ hea$ers) C+I

$Jnh ' $ot %ng c


55/104


- (h?ng a 8Jnh nhp NZ li9 ch|n U(I6u: @chyn mt /0 l[ng lTn NZ li9 8hi Nng phDng th'cPU(.

MAc N ch|n C]I BE a B\i t l % cF nhi& yd 8m %&

#$o mt nhng Bdn nay nhi& h9 th0ng %n /> NQng nF No tnhBDn gi$n % hi9 $ tong ,y N`ng cc chDng t4nh C]I. UaBy / phn tch mt /0 Bim yd th\ng #= nhZng 8k ph hoitn c?ng tong cc chDng t4nh C]I:

- Se# Ue%e: =ch %Q Se# pht tin nhanh chFng ccSe# /e%e hG t[ nhi& 8h$ n"ng m ng hDn tongBF cF c$ nhZng ch'c n"ng tnh #$o mt yd 8m.@y l lG hHng nd %idt cc chDng t4nh C]I N`a tJncc Bim yd ny.

- Cc #idn m?i t\ng: Mt Bim mnh ca cc chDngt4nh C]I l cF 8h$ n"ng 8hai thc t nhi& th?ng tinhZ ch tr cc #idn m?i t\ng. 6hng ,t %& 8ha cnh#$o mt th4 By cng l Bim yd ca cc chDngt4nh C]I. NQ ng\i %idt cc chDng t4nh C]I th\ngtin cy cc th?ng tin ly B[c tr cc #idn m?i t\ng nh#idn Y((P~O~~ Y((PO~M ...u B ydt B=nhth`c hi9n mt yJ c tr ng\i Nngw ty nhiJn nhZngth?ng tin ny hon ton cF th gi$ mo. NQ cF thgi$ mo th?ng tin ca cc #idn Y((P~O~~

Y((PO~M nh /a: telnet Nomain.com L7(ying 1.2.3.!...ConnecteN to Nomain.com]( )cgi-#in)pogam Y((P)1.7~eee: http:))Nomain.com)/ecet-Nocment.htmlOom: pe/iNentVhiteho/e.go%

YoAc cF mt /0 h9 th0ng /> NQng ,c th`c ng\i Nnga #idn ~M(5U~ % ~M(~I6( th?nga Neamon iNentNu. (y nhiJn %i9c ,c th`c ny cF thN Nng %[t a nd ng\i /> NQng lm gi$ cc th?ng tin%& ni Nng ca cc #idn m?i t\ng tJn.

- U> NQng nhp NZ li9 theo phDng th'c P5( % ](:@y l hai phDng th'c tao BHi NZ li9 chnh B[c />NQng tong giao th'c Y((P. (y nhiJn nhZng NZ li9 B-[c ty&n theo 2 phDng th'c ny hon ton Nng BqcB[c. (ong 8hi BF hi9n nay cF t nhi& tang Se#

ch'a nhZng om nhp NZ li9 cF ni Nng an tqngNo BF %n B& l th?ng tin a Se# t phH #idnw


56/104


8h?ng phQ thc %o ng?n ngZ lp t4nh no hoAc,y N`ng h9 th0ng tJn mt n&n t$ng no. @0i %TinhZng ng\i lp t4nh 8h?ng cF 8inh nghi9m hoAc8h?ng c|n thn th\ng to a nhZng lG hHng tong cc/cipt/ C]I. NQ ng\i /> NQng th\ng Nng l9nh /atong cc chDng t4nh Pel:

/y/tem })/)#in)gep /ting )/)local)Nata#a/e)le}

(h?ng th\ng chGi /ting B[c nhp %o tr cc om Y(MNQng cc t\ng |n hiNNen elN/u tong om Y(M< Bydt B=nh tnh liJn tQc ca mt phiJn lm %i9c No#$n cht ca N=ch %Q Se# l Bng - /a mGi yJ

c)Bp 'ng / thidt lp mt phiJn lm %i9c mTiu.6hZng 8k tn c?ng cF th pht hi9n th?ng tin tong cct\ng |n #sng cch ,em mE ngvn ca cc tang Se#wUa BF />a BHi cc th?ng tin ny % /#mit %Ti niNng mTi.

- @ 8hbc phQc %i9c B$m #$o tnh liJn tQc ca cc 8dtn0i a th?ng tin tong t\ng |n cF gi$i php /> NQngcoo8iew (y nhiJn %i9c /> NQng 8x tht coo8ie li lmt Bim yd 8hc %& #$o mt ca N=ch %Q Se#.6hi& h9 th0ng Client BE #= ci BAt cc chDng t4nhtoWan/ hoAc %i/ No chp nhn %i9c thidt lp coo8ietJn h9 th0ng ca hq %4 th?ng th\ng ng\i /> NQng8h?ng 8im /ot B[c cc th?ng tin tong coo8ieu.

- Mt /0 ng?n ngZ lp t4nh th?ng NQng B %idt cc/cipt/ C]I BF l: P~


57/104


/y/tem: /y/tem}commanN ag/}uw

pipe/: open5(}commanN aga/}uw

#ac8tic8/: commanN ag/w

e,ec: e,ec}commanN ag/}uw6goi a B0i %Ti C nh BE phn tch phn tJn %&cc lG hHng #$o mtw cF th #= hi9n t[ng tn %ngB9m nd nh nhp NZ li9 %[t phm %i chophp.

Mt /0 #i9n php B hn chd cc Bim yd tong cc chDngt4nh C]I BF l:

- Yn chd y&n ty nhp B0i %Ti cc chDng t4nh C]I:(h?ng th\ng cF hai h4nh th'c B 8im /ot y&n />NQng cc chDng t4nh C]I. Y4nh th'c th' nht l ng\i$n t= cF th to mt hoAc mt %i th mQc ch'anhZng /cipt/ C]I % thidt lp y&n ty nhp %o thmQc BF. PhDng th'c ny ch p NQng B0i %Ti t\ng h[p/0 ng\i ty nhp l hn chd. PhDng th'c th' hai l ng\i$n t= to cc chDng t4nh C]I cF tJn le %Ti phn mng B[c B=nh Nanh BAc #i9t th?ng th\ng phn mng l .cgi. Cc Se# /e%e hi9n nay B& hG t[ cDchd to cc 5~< iJng cho cc chDng t4nh C]Iw

- Chy cc chDng t4nh C]I %Ti y&n t0i thi:- U> NQng giao th'c Y((PU:

3.3.3. C?ng ngh9 a%a tong #$o mt N=ch %Q Se#

6g?n ngZ lp t4nh a%a B[c Un MicoUy/tem/ ,y N`ng %pht tin. Yi9n nay cF t nhi& tang Se# Bng pht tin N`atJn ng?n ngZ a%a. Yai t4nh Ny9t Se# phH #idn hi9n nay I% 6et/cape Comnicatou B& hG t[ a%a. Mt tong nhZngBim mnh ca a%a l hG t[ #$o mt t cao. (y nhiJn cF mt

%n cF mt /0 lG hHng #$o mt B[c pht hi9nw BF l:- @0i %Ti cc t4nh Ny9t 6et/cape phiJn #$n 2.7 % 2.71

cF mt /0 lG hHng cho php chy cc a%a applet cFch'c n"ng ,Fa cc le tJn h9 th0ng

- Cho php cc tn c?ng oU: Ti cc applet cF lGi / NnBdn t4nh tng chidm nhi& ti ngyJn h9 th0ng nh/> NQng CP5 H Ba.

- Mt /0 cc applet cho php to cc 8dt n0i tTi cc B=a

ch ty R m ng\i Nng 8h?ng 8im /ot B[c. Mt /0Se# /ite c0 t4nh Ba a cc applet cF nhZng Bon mE


58/104


ngvn cho php cc my Client/ /a 8hi t$i cc applet%& my tm th`c hi9n 8dt n0i tTi mt ho/t #t 8z no8hc tJn mng

3.3.!. Mt /0 lG hHng ca a%a/cipt/a%a/cipt/ l mt ng?n ngZ 8=ch #$n lm %i9c pha Se#client/w B[c pht tin #i 6et/cape. Yi9n nay %i9c /> NQngWa%a/cipt/ hdt /'c phH #idn tong h hdt cc tang Se# B&cF cc Bon mE a%a/cipt/. h?ng gi0ng nh cc lG hHng #$o mtca a%a cc lG hHng #$o mt ca a%a/cipt/ th\ng liJn an Bdncc th?ng tin c nhn ng\i Nng.

Ua By l mt /0 lG hHng #$o mt ca a%a/cipt/ BE B[cpht hi9n:

- (ong cc Se# #oVe/ 6et/cape !.* cF 8h$ n"ng chycc a%a/cipt/ Bqc thc tnh cc le tJn my Client//a BF g>i chng Bdn cc my 8hc tJn mng Intenet

- CF th /> NQng a%a/cipt/ B Bqc ni Nng cc letJn my client/ 8hi Nng I !.7 - !.71

- Cc #$n 6et/cape Comnicato Bdn !.* cho php chycc Bon mE a%a/cipt/ Bqc ni Nng cc B=a ch 5~ NQng ti9n ch ny B chyn BHi tr tJn mt ho/t/ang B=a ch IP tDng 'ng %Ti ho/t BF gi0ng %Ti ti9n chn/loo8pu. NQ:

-

ho/t -l -% -t any #.eN

Cho 8dt $ nh /a:

OonN 1 aNNe//e/ o j5.5 OonN 1 aNNe//e/ o ~U7.I6(~6IC.6( OonN 1 aNNe//e/ o UO(Sf~.j5.5 OonN * aNNe//e/ o ~U.I6(~6IC.6( OonN 1 aNNe//e/ o 6U]C.j5.5 (ying 12L.1;K.2K.K #.eN L^!77 I6 Uf j5.5YU(MfU(~.j5.5

;^1112121 w/eial %e/ionu ;77 wee/h peioN ;77 wety ee/h thi/ oten ^7!L77 we,piation peioN L^!77 wminimm ((< u #.eN L^!77 I6 6U UO(Sf~.j5.5 #.eN L^!77 I6 6U ~U.I6(~6IC.6( #.eN L^!77 I6 6U 6U]C.j5.5 #.eN L^!77 I6 f 12L.1;K.2K.K
http://149.17.36.24/prog/sockets.htmlhttp://149.17.36.24/prog/sockets.html


61/104


j$n thn nhZng th?ng tin ny 8h?ng an tqng %4 chnghon ton cF tnh p#lic c?ng cnguw h hdt cc th?ng tin nycF th t4m thy #sng l9nh SYIU.

6hng nd th?ng tin Ba a l

#.eN L^!77 I6 YI6O U56-UPf~CU(f(I6-17)!1 56I+ PPP-KK-2*.#.eN L^!77 I6 f 12L.1;K.K.23K PPP-KK-2*.#.eN L^!77 I6 YI6O PPP-YU(PPP-US PPP-KK-2^.#.eN L^!77 I6 f 12L.1;K.K.23L PPP-KK-2^.#.eN L^!77 I6 YI6O PPP-YU(PPP-US I.#.eN L^!77 I6 f 12L.1;K.17.*2 I.#.eN L^!77 I6 M+ 17 CU.j5.5 I.#.eN L^!77 I6 YI6O C-f


62/104


$Jnh ' $ot %ng cNQng cng thDng tn theo mt /0 i tbc B thn ti9n 8hi />NQng.

@dn giai Bon c0i cng nd thy ph h[p %Ti mt 8h| BE B[cmE ho 8k ph 8ho / cF B[c mt 8h| Nng te,t th?ng th\ng.(ong h4nh tJn mt 8h| Nng te,t th?ng th\ng B[c ghi %o mtle.


63/104


@ Bnh gi 8h$ n"ng thnh c?ng ca cc chDng t4nh #k 8hong\i ta Ba a c?ng th'c nh /a:

P < , ~ )U

(ong BF:

- P:


64/104


Cac8 mypa//VoNle pVc: an 37 1;:2^:!; Cac8 %!.1: (he Pa//VoNCac8e

cu flec .. MXett 1;;2 pVc: an 37 1;:2^:!;


65/104


h9 th0ng %Ti %ai t nh mt chDng t4nh h[p php. 6hZng chDngt4nh ny th`c hi9n nhZng ch'c n"ng m ng\i /> NQng h9 th0ngth\ng 8h?ng mong m0n hoAc 8h?ng h[p php. (h?ng th\ngtoWan/ cF th chy B[c l No cc chDng t4nh h[p php BE #= thayBHi mE ca nF #sng nhZng mE #t h[p phpw.

6hZng chDng t4nh %i/ l mt loi Bin h4nh ca cc chDngt4nh (oWan/: 4 nhZng chDng t4nh %i/ che N cc Bon mEtong nhZng chDng t4nh /> NQng h[p php. hi nhZng chDngt4nh ny hot Bng th4 nhZng Bon mE |n N th`c thi B th`cmt /0 ch'c n"ng m ng\i /> NQng 8h?ng #idt.

Mt B=nh ngha ch|n tbc %& cc chDng t4nh (oWan/ nh/a:

Mt chDng t4nh toWan/ cF th l mt chDng t4nh th`c hi9n

mt c?ng %i9c m ng\i /> NQng 8h?ng #idt tTc gi0ng nh "n cpmt 8h| hay copy le/ m ng\i /> NQng 8h?ng nhn th'c B[cBi& ny.

CF th phn loi cc chDng t4nh toWan nh /a: l #t 8 ch-Dng t4nh th`c hi9n nhZng ch'c n"ng 8h?ng mong m0n hoAcm0n |n N. 6hZng chDng t4nh toWan cF th tvn ti NTi nhi&Nng 8hc nha. 6F cF th l mt ti9n ch thQc hi9n to ch mQccho le tong thc mQc hoAc mt Bon mE ph 8ho B"ng 8R B0i%Ti mt phn m&m hoAc c0 th l mt chDng t4nh ,> lR %"n#$n hoAc mt ti9n ch mng...

6hZng tc gi$ ca cc chDng t4nh toWan ,y N`ng mt 8dthoch. +t %& 8ha cnh #$o mt tJn Intenet mt chDng t4nhtoWan / th`c hi9n 1 tong nhZng c?ng %i9c /a:

- (h`c hi9n mt %i ch'c n"ng hoAc gip ng\i lp t4nhpht hi9n nhZng th?ng tin an tqng hoAc th?ng tinc nhn tJn mt h9 th0ng hoAc mt %i thnh phnca h9 th0ng BF

- Che N mt %i ch'c n"ng hoAc gip ng\i lp t4nh

pht hi9n nhZng th?ng tin an tqng hoAc th?ng tinc nhn tJn mt h9 th0ng hoAc mt %i thnh phnca h9 th0ng BF

Mt %i chDng t4nh toWan cF th th`c hi9n c$ 2 ch'c n"ngnyw 6goi a mt /0 chDng t4nh toWan/ cn cF th ph h h9th0ng #sng cch ph hoi cc th?ng tin tJn H c'ng % NQ cc t-ng h[p l %i/ Meli/a ly lan a B\ng th Bi9n t>u.

Mt /0 % NQ ca cc chDng t4nh toWan/:

- Mt chDng t4nh cF tJn l f


66/104


8hi ng\i /> NQng Nng h9 th0ng f< fmeica nlineu.ChDng t4nh gvm mt le ipw 8hi ng\i /> NQng Nngfi mail tTi 8k ph

hoiw Cch th'c />a BDn gi$n nht l thay thd ton # ni Nngca cc chDng t4nh BE #= $nh hng #i cc Bon mE toWan/ %thay thd cc pa//VoN/ ca ng\i /> NQng h9 th0ng.

(y nhiJn %Ti nhZng t\ng h[p nghiJm tqng hDn l nhZng 8ktn c?ng to a nhZng lG hHng #$o mt th?ng a cc chDngt4nh toWan/w % NQ nhZng 8k tn c?ng ly B[c y&n oot tJn h9th0ng l l[i NQng nF B ph h ton # hoAc mt phn ca h9th0ngw chng Nng cc y&n oot B thay BHi loglew ci BAtcc chDng t4nh toWan/ 8hc m ng\i $n t= 8h?ng th phthi9n. (ong t\ng h[p ny m'c B $nh hng l nghiJm tqng %

ng\i $n t= h9 th0ng BF ch cn cch l ci BAt li ton # h9th0ng


67/104


(.>. KnijEr

2.!.1. hi ni9m %& /niXe:

UniXe theo ngha Ben l Bnh hDi ng>iw @0i %Ti #$o mt h9

th0ng /niXe B[c hi l cc c?ng cQ cF th l phn c'ng hoAcphn m&mu }#bt} cc th?ng tin l chyn tJn mngw tr cc th?ngtin }#bt} B[c BF B }Bnh hDi} ly B[c nhZng th?ng tin cF git= tao BHi tJn mng.

Yot Bng ca /niXe cng gi0ng nh cc chDng t4nh }#bt}cc th?ng tin g tr #n phm 8ey capteu. (y nhiJn cc ti9n ch8ey capte ch th`c hi9n tJn mt tm lm %i9c cQ thw B0i %Ti/niXe cF th #bt B[c cc th?ng tin tao BHi giZa nhi& tm lm%i9c %Ti nha.

2.!.2. Yot Bng ca /niXe:

Cc chDng t4nh /niXe /niXe m&mu hoAc cc thidt #= /niXe/niXe c'ngu B& th`c hi9n #bt cc gFi tin tng IP t ,0nggvm IP Natagam % thenet Pac8etu. o BF cF th th`c hi9n/niXe B0i %Ti cc giao th'c 8hc nha tng mng nh (CP 5PIP+ ...

MAt 8hc giao th'c tng IP B[c B=nh ngha c?ng 8hai %c tc cc t\ng heaNe ng nJn %i9c gi$i mE cc gFi tin ny

8h?ng 8hF 8h"n.MQc Bch ca cc chDng t4nh /niXe BF l thidt lp chd Bpomi/co/ moNe Nng chngu tJn cc caN mng ethenet - nDicc gFi tin tao BHi tong mng - tr BF }#bt} B[c th?ng tin.

Cc thidt #= /niXe cF th #bt B[c ton # th?ng tin tao BHitJn mng l N`a %o ngyJn tbc #oaNca/t $ng #u cc gqi tintong mng thenet.

(Jn h9 th0ng mng 8h?ng Nng h# NZ li9 8h?ng chynBdn mt hTng m B[c l chyn theo mqi hTng. NQ 8hi mt

tm lm %i9c cn B[c g>i mt th?ng #o Bdn mt tm lm %i9c8hc tJn cng mt /egment mng mt yJ c tr tm Bch B[cg>i tTi tt c$ cc tm lm %i9c tJn mng B ,c B=nh tm no ltm cn nhn th?ng tin tm Bchu. Cho tTi 8hi tm ngvn nhnB[c th?ng #o chp nhn tr tm Bch th4 lvng NZ li9 / B[cg>i Bi. (heo Bng ngyJn tbc nhZng tm 8hc tJn /egmentmng / #{ a cc th?ng tin tao BHi giZa hai tm ngvn % tmBch ,c B=nh. (y nhiJn cc tm 8hc cng 8h?ng #= #bt #cph$i #{ a nhZng th?ng tin ny No BF chng %n cF th }nghe}B[c #sng cch thidt lp chd B pomi/co/ moNe tJn cc caN

mng ca tm BF. UniXe / th`c hi9n c?ng %i9c ny.


68/104


Mt h9 th0ng /niXe cF th 8dt h[p c$ cc thidt #= phn c'ng% phn m&m tong BF h9 th0ng phn m&m %Ti cc chd BNe#g th`c hi9n phn tch cc gFi tin }#bt} B[c tJn mng.

Y9 th0ng /niXe ph$i B[c BAt tong cng mt /egment mng

netVo8 #loc8u cn nghe nn.Y4nh /a minh ho %= t BAt /niXe

$Jnh ' Cc vO tr# t snijEr trdn / sEgmEnt mng

2.!.3. M'c B ngy hi ca /niXe

PhDng th'c tn c?ng mng N`a %o cc h9 th0ng /niXe l t

ngy him %4 nF B[c th`c hi9n cc tng t thp tong h9th0ng mng. Ti %i9c thidt lp h9 th0ng /niXe cho php ly B[cton # cc th?ng tin tao BHi tJn mng. Cc th?ng tin BF cF thl:

- Cc ti 8ho$n % mt 8h| ty nhp

- Cc th?ng tin ni # hoAc cF gi t= cao

- ...

(y nhiJn %i9c thidt lp mt h9 th0ng /niXe 8h?ng ph$i BDn

gi$n %4 cn ph$i ,m nhp B[c %o h9 th0ng mng BF % ciBAt cc phn m&m /niXe. @vng th\i cc chDng t4nh /niXecng yJ c ng\i /> NQng ph$i hi / %& 8idn tc cc giaoth'c mng.

MAc 8hc /0 l[ng cc th?ng tin tao BHi tJn mng t lTn nJncc NZ li9 No cc chDng t4nh /niXe /inh a 8h lTn. (h?ng th-\ng cc chDng t4nh /niXe cF th c h4nh B ch th nhp tr277 - 377 #yte/ tong mt gFi tin %i th\ng nhZng th?ng tin antqng nh tJn ng\i Nng mt 8h| nsm phn B gFi tin.


69/104


(ong mt /0 t\ng h[p $n t= mng B phn tch cc th?ngtin l chyn tJn mng ng\i $n t= cng cn ch Bng thidtlp cc chDng t4nh /niXe %Ti %ai t ny /niXe cF tc NQng t0t.

2.!.!. Mt /0 chDng t4nh /niXeMt /0 ti9n ch mng tJn 56I+ cng cF th coi l cc chDngt4nh /niXe nh taceotew tcpNmp.

Chi tidt hot Bng ca chDng t4nh (CPNmp / B[c t4nh #ytong phn phQ lQc

2.!.*. Pht hi9n h9 th0ng #= /niXe:

i9c pht hi9n h9 th0ng #= /niXe 8h?ng ph$i BDn gi$n %4/niXe hot Bng tng t thp % 8h?ng $nh hng tTi cc 'ng

NQng cng nh cc N=ch %Q h9 th0ng BF cng cp. Mt /0 #i9nphp /a ch cF tc NQng 8im ta h9 th0ng nh:

- im ta cc tidn t4nh Bang th`c hi9n tJn h9 th0ng#sng l9nh p/ tJn 5ni, hoAc t4nh $n lR ti ngyJntong SinNoV/ 6(u. _a BF 8im ta cc tidn t4nh ltJn h9 th0ngw ti ngyJn /> NQng th\i gian 8hi totidn t4nh... B pht hi9n cc chDng t4nh /niXe.

- U> NQng mt %i ti9n ch B pht hi9n caN mng cFchyn /ang chd B0 pomi/co/ hay 8h?ng. 6hZng

ti9n ch ny gip pht hi9n h9 th0ng ca #n cF Bangchy /niXe hay 8h?ng.

2.!.^. Cc #i9n php hn chd /niXe

i9c ,y N`ng cc #i9n php hn chd /niXe cng 8h?ng 8hF 8h"n nd ta tn th cc ngyJn tbc %& #$o mt nh:

- h?ng cho ng\i l ty nhp %o cc thidt #= tJn h9th0ng

- _$n lR c h4nh h9 th0ng chAt ch- (hidt lp cc 8dt n0i cF tnh #$o mt cao th?ng a

cc cD chd mE ho. Phn 3 / t4nh #y cc #i9n phpto 8dt n0i cF mE hou.


70/104

!o m"t h thng v mng my t#nh 0h-n 3

0h-n 3 ' Cc 2in 7h7 2!o v mng my t#nh

(ong cc phn tJn 8hi t4nh #y %& mt /0 lG hHng % Bimyd ca mng BE t4nh #y cc #i9n php #$o %9 tDng 'ng B0i%Ti trng t\ng h[p cQ th. Phn ny / t4nh #y cc #i9n phptHng an hDn cho php #$o %9 Bvng th\i nhi& loi N=ch %QtJn mt h9 th0ng.

I. Cc 2in 7h7 ki;m sot h thng

1. Ki/m -ot h thng ;ua *og


71/104


)e,pot)home)%hai

1.1.2.


72/104


171:22u%toan pt/)^ 273.1^2.7.LK Oi Uep 1* 1*:2L /tillloggeN in%toan pt/)! 273.1^2.7.LK Oi Uep 1* 1*:2K /tillloggeN in%toan pt/)! Oi Uep 1* 1*:12 - 1*:1277:77u%toan pt/)17 Oi Uep 1* 1*:11 - 1*:1177:77u

1.1.!. (i9n ch Uy/log

@y l mt c?ng cQ ghi logle t hZ ch B[c /> NQng tth?ng NQng tJn cc h9 th0ng 56I+. (i9n ch /y/log gip ng\i

$n t= h9 th0ng N Nng tong %i9c th`c hi9n ghi logle B0i %Ticc N=ch %Q 8hc nha. (h?ng th\ng ti9n ch /y/log th\ng B[cchy NTi Nng mt Naemon % B[c 8ch hqat 8hi h9 th0ng 8hiBng. aemon /y/logN ly th?ng tin tr mt /0 ngvn /a:

- )Ne%)log: 6hn cc me//age/ tr cc tidn t4nh hotBng tJn h9 th0ng

- )Ne%)8log: nhn me//age/ tr 8enel

- pot *1!: nhn cc me//age/ tr cc my 8hc a pot*1! 5P.

hi /y/logN nhn cc me//age/ tr cc ngvn th?ng tin ny nF /th`c hi9n 8im ta le c h4nh ca N=ch %Q l /y/log.con - Bto log le tDng 'ng. CF th c h4nh le /y/log.con B to mtme//age/ %Ti nhi& N=ch %Q 8hc nha.

NQ ni Nng mt le /y/log.con nh /a:

(hi/ le i/ poce//eN #y m! /o #e cael to ote u name/ that match m! e/e%eN VoN/. fl/o Vithin iNe/ agment/ containing comma/ m/t #e oteN..ew8en.noticewath.notice )Ne%)con/ole.ew8en.Ne#gwNaemon.noticewmail.cit )%a)aNm)me//age/

.aletw8en.ewNaemon.e opeato.alet oot

.emeg

i a non-logho/t machine choo/e/ to ha%e athentication


73/104


me//age/

(ong ni Nng le /y/log.con ch a B0i %Ti cc me//age/ coNng .emeg me//age/ cF tnh 8h|n cpu / B[c th?ng #o tTi ttc$ ng\i /> NQng tJn h9 th0ngw @0i %Ti cc me//age/ cF Nng .ehoAc 8en.Ne#g % nhZng hot Bng ty cp 8h?ng h[p php /B[c ghi log tong le )%a)aNm)me//age/.

MAc B=nh cc me//age/ B[c ghi %o logle)%a)aNm)me//age/.

1.1.*. (i9n ch /log

jt c' 8hi no ng\i /> NQng Nng l9nh }/} B chyn /anghot Bng h9 th0ng NTi y&n mt /e 8hc B& B[c ghi log

th?ng a ti9n ch /log. 6hZng th?ng tin logle ny B[c ghi %ologle )%a)aNm)/log. (i9n ch ny cho php pht hi9n cc t\ngh[p Nng y&n oot B cF B[c y&n ca mt /e no 8hc tJnh9 th0ng.

NQ ni Nng ca logle /log nh /a:

moe )%a)aNm)/logU5 71)7! 13:3! pt/)1 %toan-ootU5 71)7! 13:*3 pt/)^ %toan-oot

U5 71)7! 1!:1; pt/)^ %toan-ootU5 71)7! 1!:3; pt/)1 %toan-oot

1.1.^. (i9n ch con

(i9n ch con / ghi li logle ca cc hot Bng th`c hi9n #il9nh conta#/. (h?ng th\ng logle ca cc hot Bng con ltong le )%a)log)con)logw 6goi a cF th c h4nh /y/log Bghi li cc logle ca hot Bng con.

NQ ni Nng ca logl e con nh /a:

moe olog con /tateN piN 23^K Oi fg ! 1^:32:3L 2777 CM: )e,pot)home)mtg)mtg)e,pot)home)mtg)temcont.cg %hai 23L^ c Oi fg ! 1^:3!:71 2777 %hai 23L^ c Oi fg ! 1^:3!:72 2777 CM: )e,pot)home)mtg)getcont.pl %hai 2!77 c Oi fg ! 1^:3*:77 2777

%hai 2!77 c Oi fg ! 1^:3*:17 2777 CM: )e,pot)home)mtg)mtg


74/104


)e,pot)home)mtg)temcont.cg

1.1.K.


75/104


272.1^K.123.1K7 - - 73)fg)2777:17:*;:!3 7K77 }]( )/ppot)cgi-#in)/each.pl Y((P)1.7} !71223273.1^2.!^.^K - - 73)Uep)2777:22:*7:*2 7K77 }]( http:))VVV.geocitie/.com) Y((P)1.1} !71 223273.1^2.7.L* - - 1*)Uep)2777:7K:!3:1K 7K77 }]( )/ppot)cgi-#in)/each.pl Y((P)1.7} !71 223273.1^2.7.L* - %hai 1*)Uep)2777:7K:!3:22 7K77 }]( )/ppot)cgi-#in)/each.pl Y((P)1.7} !7! 27K

273.1^2.7.L* - - 1*)Uep)2777:7K:!3:1K 7K77 }]( )/ppot)cgi-#in)/each.pl Y((P)1.7} !71 223

/.(. *%t s cng c+ hu #ch h5 tr 7hn t#ch logDlE@0i %Ti ng\i $n t= %i9c phn tch logle ca cc N=ch %Q l

hdt /'c an tqngw cF mt /0 c?ng cQ tJn mng gip ng\i $nt= th`c hi9n c?ng %i9c ny N Nng hDnw BF l:

- (i9n ch ch8la/tlog % ch8Vtmp gip phn tch cclogle la/tlog % S(MP theo yJ c ng\i $n t=. CFth t4m thy cc c?ng cQ ny B=a ch tp.c.net)p#)/ecity)ch8la/tlog-1.7.ta.g %

)p#)/ecity)ch8Vtmp-1.7.ta.gu.- (i9n ch netlog gip phn tch cc gFi tin gvm 3

thnh phn:

- (CPlogge: log li tt c$ cc 8dt n0i (CP tJnmt /#net

- 5Plogge: log li tt c$ cc 8dt n0i 5P tJnmt /#net

- ,tact: +> lR cc logle ghi li #i (CPlogge% 5jlogge.

(i9n ch ny cF th t4m thy B=a chtp.c.net)p#)/ecity)netlog-1.2.ta.g

- (i9n ch (CP Vappe: (i9n ch ny cho php ng\i$n t= h9 th0ng N Nng gim /t % lqc cc gFi tin(CP ca cc N=ch %Q nh /y/tat nge telnet login /htal8 ...(i9n ch ny cF th t4m thy B=a chtp.cet.og)p#)tool/)tcpVappe/)tcpVappe/K.2.ta

/.3. Cc cng c+ ghi log thng sY +ng trong [inoFs _T:(ong h9 th0ng SinNoV/ 6( !.7 % SinNoV/ 2777 hi9n nay

B& hG t[ By B cc cD chd ghi log %Ti cc m'c B 8hc nha.6g\i $n t= h9 th0ng ty thc %o m'c B an ton ca N=ch %Q% cc th?ng tin /> NQng cF th l`a chqn cc m'c B ghi log 8hcnha. 6goi a tJn h9 th0ng SinNoV/ 6( cn hG t[ cc cD chdghi logle t`c tidp %o cc Nata#a/e B to #o cow gip ng\i$n t= phn tch % 8im ta h9 th0ng nhanh chFng % thnti9n. U> NQng ti9n ch e%ent %ieV B ,em cc th?ng tin logletJn h9 th0ng %Ti cc m'c B nh fpplication logw Uecity logwUy/tem log. Cc h4nh NTi By / minh ho mt /0 hot Bng ghilogle tJn h9 th0ng SinNoV/:


76/104


NQ: @ ghi li hot Bng Bqc %idt ty nhp.... B0i %Ti mtle)th mQc l thnh c?ng hay 8h?ng thnh c?ng ng\i $n t= cFth c h4nh nh /a:

- Chqn Oile Manage - 5/e Manage - Uecity - fNiting.

NQ h4nh /a minh hqa cc hot Bng cF th B[c ghilog tong SinNoV/ 2777:

$Jnh ' ehi logs trong [inoFs ()))

- U> NQng ti9n ch %ent ieV cho php ,em nhZng th?ng tinlogle nh /a:

$Jnh ' Cng c+ ZvEnt HiEF c


77/104


$Jnh ' Chi tit / thng 2o l5i trong [inoFs ()))

(h?ng #o ny cho #idt ngyJn nhn th\i Bim ,$y a lGicng nh nhi& th?ng tin an tqng 8hc.

CF th c h4nh %ent Ue%ice B th`c hi9n mt action 8hi cFmt th?ng #o lGi ,$y a nh /a:

$Jnh ' C1u hJnh Ochv+ ghi logs trong [inoFs ()))

6goi a cng gi0ng nh tJn 56I+ tong SinNoV/ 6( cng cFcc c?ng cQ theo Ni logle ca mt /0 N=ch %Q th?ng NQng nh O(PSe#w (y thc %o loi /e%e /> NQng cF cc phDng php c

h4nh 8hc nha.


78/104


II. Cc 2in 7h7 to kt ni =n ton

2. >iao thc ??@

(./. eiQi thiu chungj$o mt ca N=ch %Q Se# nFi chng % ca cc N=ch %Q 8hc

nh mail O(Pu B& N`a tJn n&n mt giao th'c c"n #$n l UU NQng cng>i mt th?ng tin tTi Se# /e%e l /0 CeNit CaN ca m4nh

UU< Client fthentication: NQng B ty&n tong mt 8dt n0i UU


80/104


- im ta tnh ,c th`c tr Client Bdn Ue%e l mt l`achqn

- U> NQng 8x tht mE hFa p#lic 8ey B to mt /ecet8ey /> NQng tong 8Jt n0i UU< /a BF

- (o mt 8dt n0i UU NQng cc NZ li9 tr #Tc 1 gvm cc th?ng tin tr/e%e nh ciphe m /e%e BF hG t[u B to mt 8hFa gqi lpema/te cho phiJn lm %i9c BFw mE hFa 8hFa ny #sngp#lic 8ey ca /e%e cF B[c %4 nF BE cF ceticate ca/e%eu % g>i 8hFa pema/te tTi /e%e

*. 6d /e%e yJ c 8im ta tnh ,c th`c ca Client ch Rsng By ch l mt option tong t4nh hanN/ha8euClient cn th`c hi9n %i9c 8R %o phn th?ng tin m nF g>iBdn /e%e B B$m #$o sng t4nh hanN/ha8e ny lNy nht 8h?ng th #= gi$ mo #i mt ng\i no 8hcu. o%y tong t\ng h[p ny th?ng tin g>i tr Client tTi Ue%e #aogvm:

- ChZ 8R ca Client

- Ceticate ca Client- Pema/te 8ey BE B[c mE hFa #sng p#lic 8ey ca

Ue%e

^. 6d /e%e yJ c 8im ta tnh ,c th`c ca Client /e%e/ th`c hi9n %i9c ,c th`c Client th?ng a t4nhfthentication Client / B[c m? t$ phn /au. 6d Client8h?ng h[p l9 phiJn lm %i9c / #= hy #{. 6d Client B[c8im ta l h[p l9 /e%e / /> NQng pi%ate 8ey ca nF BmE gi$i mE 8hFa pema/te th`c hi9n cc #Tc tidp theo 8dt

h[p %Ti t4nh th`c hi9n pha Clientu B to 8hFa ma/te.K. C$ Client % Ue%e / B& /> NQng ma/te 8ey B to mt

/e//ion 8eyw 8hFa /e//ion l mt 8hFa B0i ,'ng /> NQng BmE hFa % gi$i mE tong c$ phiJn lm %i9c UU< % B ,cnhn tnh ton %n NZ li9 8im ta NZ li9 cF #= thayBHi hay 8h?ng giZa th\i gian NZ li9 BE B[c g>i % th\igian nhn NZ li9 a mt 8dt n0i UUi mt me//age tTi /e%e th?ng #o cc me//age mnF /bp g>i tr client / B[c mE hFa #sng /e//ion 8ey. /a

nF Client g>i mt th?ng #o ,c nhn sng t4nhhanN/ha8e BE 8dt thc.

;. Ue%e g>i mt me//age tTi /e%e th?ng #o cc me//age mnF /bp g>i tr client / B[c mE hFa #sng /e//ion 8ey. /anF Ue%e g>i mt th?ng #o ,c nhn sng t4nhhanN/ha8e BE 8dt thc.

17. _ t4nh hanN/ha8e 8dt thcw phiJn lm %i9c UU< #btB. Client % Ue%e /> NQng /e//ion 8ey B mE hFa % gi$imE NZ li9 % 8im ta tnh ton %n ca NZ li9 BF

Mt ch R an tqng tong t4nh hanN/ha8e l %i9c 8im tatnh ,c th`c ca Client % Ue%e B[c th`c hi9n th?ng a %i9c


82/104


/> NQng mt cAp 8hFa pi%ate-p#lic 8ey ca mt th`c th nhtB=nh.

- (ong tDng h[p ,c th`c pha /e%e Client mE hFapema/te /ecet #sng

Documents

Bao Mat He Thong Va Mang May Tinh -Sachvn247