GPCGD161180HG270J.

.

2016621

1. //30

1. /

1. ////

1. ////2

1. /

1. /

1.

1. /

1. //

1. /

1. /

1. //3/

1. /

1.

1.5%300/

() () () () () () () () (1http://www.gdyingteng.com2 +30757-22662211 gdyingteng@163.com) ()

1

2

3

4

5

11014633946003

0757-22662204 0757-22622388 0757-22662211

gdyingteng@163.com http://www.gdyingteng.com

7111

GPCGD161180HG270J

1226

()

1.

2.

3.120

4.

5.

6.

7.www.gpcgd.com

1.

2.

3.

4.

5.

201662120166281181150

2016714930

1183301

2016714930

1183301

241270

/

020-6279 1639/

020-8330 9916/

118801/

510030/

QQ3258974236

2016621

1226

120

--

1

6

2

WEB

3

3

3

4

2

5

IDS

2

6

2

7

APT

2

8

2

9

2

10

2

11

SOC

1

12

1

13

1

1

2

1226

1120

2

1

2

1

1

2

3

2.

(1)

(2)

(3)

(4)

(5)

1.

2.7*241

3.

4.

1.

1

2

3

4

5

6

7

8

9

2

1

2

3

4

3.

4.

1.

2.15730%

3.730%

4.734%

5.72%6%

--

--

11

11

11

3.111

3.212

3.312

1 13

2 WEB14

3 18

4 20

5 IDS22

6 24

7 APT26

8 27

9 30

10 32

11 SOC35

12 40

13 43

45

4.145

4.245

45

5.145

5.246

5.2.146

5.2.246

5.346

46

46

47

47

47

48

11.148

11.249

11.349

11.450

50

12.150

12.250

50

51

14.151

14.251

2018 1.25 10

1

2

3

4//

3.1

1

2

3.2

3.3

1

1

2

WEB

3

IPSEC VPNAPT

4

2U4SFP+44SFPHA1216

5

40Gbps26GbpsIPS12Gbps8Gbps100050

6

WEBWEB

WIFI

DNS

DNS Docting

ICMPTracerouteTCPHTTPDNSHTTPDNSTCPHTTPTCPTCPDNSDNS

UP/DOWN

IPv4/IPv6

IPv6IPv6//

IPv6FTP\TFTPIPS

7

RADIUSLDAP

8

HTTPSBTSkype

9

10

IP/IP///IP

11

URLDLP

12

webSQL3800+CNNVD1

13

DDOS

DDOSlandSmurfwinnuketcp_sscanip_optiontarga3SynfloodIcmpfloodUdpfloodPortscanipsweep

DNSDNS Query floodDNS Reply Flood

DHCPDHCP Flood

14

HTTP/SMTP/POP3/FTP/IMAP25002

15

URL

URL80600URLWEB

DLP

HTTP/FTP/SMTP/POP3PDFOfficejava-classjpg20

16

20

5

SYSLOGSYSLOGNAT

17

18

3IDC

19

-

ISO27001

TL9000

20

3

2 WEB

1

SQLXSSCSRFWEBURLWEBDDOS

2U21212SFPHA1632

2

6Gbps

TCP500HTTP6

3

IP

IP

IPWAFIP

VLANVLANtrunk

(Channel)Trunk

MTU

ARP,MAC

IPV6IPV6

4

HTTPS

HTTP/HTTPS

content-lengthbodyheadercookiesheaderheader

WEB

SQL,Cookie

(XSS)

webshell

appscanawvs

HTTP00Struts2

URI

(CSRF)

IPURL

URLWAF

MIME

URIURLURI

URL

appscanw3afWAF

httpswaf

IP

IP

DDoS

http

ddos

HTTP/HTTPS Flood

URIURIHTTP Floodddos

SLOW HEADERSLOW POSTddos

HTTP/HTTPS FloodIP

HTTP/HTTPS FloodIP

HTTP/HTTPS Flood

WEB

WEBSQL

WEBweb

webpdf,html,txt,xml

5

WebWAFUSBHA

WAFIPV4IPV6IP

HTTP

CPUSSD

syslogwelf

()IPIPIPURL

IPIPID

DDOS

CSVXML

IPTOPN

6

SSLWEBSSHConsole

NTP

pingTRACEROUTETCPHTTPDNS

SNMPV1V2V3SNMP

WAFDNS

WAF

WEB

starttlsssl

7

()

WAF

WAF(downdown)

WAFWAF

Bypass

bypassbypass

8

(WAF)

IT

WEB(OWASP)WEB

-

TL9000

9

3

3

1

2+1

/()

FTP

2

ABAB

ASIC

3

1210/100/1000M2HA4USB1RJ45 CONSOLE9Gbps601ms

4

IPV6IPV4

5

IPv4IPv6

MD5

6

IPv4IPv6

oracleSql Server DB2Sybase

7

URL

HTTPGET/POST/PUT/HEADHTTP

MIME

8

FTP

IPv4IPv6

FTP

9

IPv4IPv6

10

OPC

DCS/SCADAOPC

OPC

11

12

13

DoSDDoS

14

B/SWeb

FTP

SNMP v1v2v3trap

CPU

15

16

1.

2.

3. B

4. 3C

5. IPv6 Ready

6.

7.

8. Frost

9. 2015

17

3

4

1

2U1100/1000 Base-Tx6100/1000M4

80000SQL/S

20SQL

TAPSPAN

B/S

6*100/1000M RJ45

2TB

2000

2

OracleSQL ServerMySQLDB2GBaseDM

3

IPMACPort()

IPMACPort

DDLDMLDCLSQL

OEP/(,,)

,

whereIP

who

what

when

howDDLDMLDCL

other

100099%

4

CVE400

SQL

SQLSQL,SQLSQL

5

IPIPMACMAC

IPIP/

IP

WORD\HTML\JPG\PDF\EXCEL

6

select

SQL

IPMAC

SYSLOGSNMP

7

8

APPandroidiphoneAPPAPPAndroidIOS

9

3

5 IDS

1

SSD

2

2U2SFP+42Bypass4SFPHA3URL

3

20Gbps50012IDS10Gbps

4

VLANMPLSPPPoE

IPv6IPv6 over IPv4IPv6IPv4

5

URL

6

RPCWEBCGIHTTP

3500

2~7

TCP reset

7

DDOS

landSmurfPingofdeathwinnuketcp_sscanip_opTSonteardroptarga3IDSpoofSynfloodIcmpfloodUdpfloodPortscanIDSweepDOS/DDOS

DHCP floodDNS FloodCC

DDOS

8

FTPHTTPSMTPPOP3380

9

P2P231200

10

URL

URL650

URL

11

Ad-hoc

WIFIAP

APAP

12

WEBHTML

WEB

NATIP/MAC

13

,

14

web

web

/

web

15

EAL3+

ISCCC

16

ISO27001

17

3

TL9000

6

1

1.

2.

3. C+

4.

5.

6. EAL3

7. APPandroidiphoneAPPAPP

2

26

4Gbps4

3

WEBLDAPRADIUS

(,)

ORACLESQL ServerMY SQLDB2SybaseInformixPostgresql

IP/

SQLSQLIPIPMAC

IP

1000URL30URL

IPURLWeb

HTTPIPIPURL

SMTPPOP3WEBMAILIPIPDOCPDFZIPRARTXT

IP

IMIPIPURL

/IPIP

QQMSN MessengerICQUCIP/

HTTPFTP/IPIP

TELNETFTPIP

TELNETIPIP

FTPIPIP

P2PIPIPIP

IPTOP10TOP10 IPIPTOP10IP TOP10IP

4

IP

IP

IPv6IPv6IPv6

B/SIP

CLISSH

OOB

radiusLDAP

XML

snmp trapsnmp agentv1v2cv3syslog

5

3

7 APT

1

53

2U410/100/1000BASE-T4SFP

2

IP

DHCP

SSHCLI

HTTPWeb

3

6000

ZIPRARTAR

MIMEInternet

JavaScript

MS OfficeVB Script

GIFJPEG

HTTP

95%

4

1

3600

5

6

7

1day/nday

0day

8

100

IP

wordexcelrtfpdf

9

IPIP

10

ISO27001

11

3

TL9000

8

1

2U64SFP81T500/15004003

WEB

2

SSHTELNEVNCFTPSFTPORACLEMSSQLSybaseMysqlDB2Informix

3

web

clone sessionSFTP

webrdp

sshrdp

4

OTPADMAC

WordPdf

IP

IPIP

()

ADAD

IP

5

()

WEBIPIP

SSO

SSO

WEB

/

LinuxWindows

6

webC/S

SSHTELNETRDP

()

VPN()

OTPADMAC

Windows

7

Telnet(23)FTP(21)

8

LinuxWindows

SOCSOC

9

10

ISO27001TL9000

11

3

9

1

1U642USB500G SATA

2

200CIP70IP

3

HTTPSIP

4

5

6

web /

7

IP

message

8

CVECNNVDCNCVEBugtraq

CVE

9

Microsoft Windows 9X/NT/2000/XP/2003/Vista/2008/7Sun SolarisHP UnixIBM AIXIRIXLinuxBSD

Cisco3ComCheckpointAlcatel

SQL ServerOracleSybaseDB2MySQLWebFTP

IEMSNMozilla FirefoxYahoo MessengerMS OfficeMedia PlayerVMwareP2PBitTorrent