CAJ | 학술논문

在对软件漏洞进行研究的基础上,从发掘网络设备硬件漏洞的角度对网络信息安全进行了思考.分析了网络信息安全现状,列举了当前主要的网络防御技术,分析了交换芯片AL216的组成结构和设计原理,研究了如何利用交换芯片AL216为核心设计实现以太网交换设备,并讨论了利用该芯片设计交换设备可能存在的硬件漏洞.通过论述表明了网络设备硬件漏洞存在的可行性和隐蔽性.
재대연건루동진행연구적기출상,종발굴망락설비경건루동적각도대망락신식안전진행료사고.분석료망락신식안전현상,열거료당전주요적망락방어기술,분석료교환심편AL216적조성결구화설계원리,연구료여하이용교환심편AL216위핵심설계실현이태망교환설비,병토론료이용해심편설계교환설비가능존재적경건루동.통과논술표명료망락설비경건루동존재적가행성화은폐성.
Based on the research of software vulnerability, information security is discussed in the view of discovering hardware vul-nerability of network equipment. The actuality of network information security is analyzed. Several current popular technologies of net-work defense are listed out. The structure and principle of AL216 is analyzed. It's researched that how to design ethernet switch equipment using AL216. The hardware vulnerability of the equipment is discussed. It's testified that the hardware vulnerability of network equipment is possible and difficulty to be detected.