     !#"%$ É0\8K8ê0d!8dM Á<¿" ®lACB$# %'& /'() d6ÆÇ/eg a,Sa<D.- §/10l\*sG[lÐ32lD4si\6^1 &('*),+GDÈ+%*I-.0/4z 57/ 68 9öW÷ø
OEP 2QCRS;U1*TWV24XY3658IG7:Z[]9<\6;>^`=>2@_GaY?<ACbUcLBEVDGXeFHJdLf4IL[K/eMgNd*Ï@uWZ ¯0° e\4_]sGT§ciwh8jxklyezDGm:/en]g c>TSop<d6qrsGt4uiZevLZ[]\6^v0\S^ î]Ü@9eM³;Y:B YDSHe[*KS4<s ;= 5cL{@|s@IGZ }~*L/ *0QW/850 B Ñ%bLcSr >e§ ¿:Àiz Á = ¯]° D0î0Ü>/ 5:¿§ ÀU*Á \ ¯°î:Ü
9:M4z;lB?'ec@@ A]ùAC´=D 
cL45BcL@:c8e]D2BE]*2S\6e^ 2 : A]ùAC´d +BDCUa0Z[]\6^\8c2 ¡¢l£¥¤_Sc6¦4wx§ yz / wz x/ y §S¨©]*\@QW5:cLª@rlDU«*¬*\6^ § g _Sc dL{YIGZ>H][]\:_:/ s6c>§ev¯\S°­:*2:\=L®]±i²³2>5l;ls ´ED °c>µ­:*2:\6=L^®]2>5*DGFHJIGZ Dw]x]y § z / ¯4° C\i¶:·`c*±8²`;%´¹¸4º³cW»]¼s­]¿:2]ÀLÁ=i®42@5eDUF0HYISK]±W²C;Y¿:´½ciÀi*Á ³D*¾ilsILZ z / /ÄlÅ §*d=60:4§8CF]DUH%Â:ISÃ*K <¿:\SÀi^ Á =@dW=6:0Æ0:ÇJ*DLYÈCs ÉZ
E FHGJI7K
6/g¯°­:2:DL*=L®]\6^2>5Ê@§W@%I c6ËÌlDGFHJIGZ c­:2:=L®]2>5¿4Ê@Ài§ Á ¿ÀUÁ °]=iµ ­:2:=DG@%IGZ / /*[8Ò:n>ÓÍ *2 ñ0<ò02+óiô]z z ò/*õ g L:ö M`NDLOHeP []K'42 ³27CD6F:H4
ÔTY*ÎW\:c<_:Ï<s6ÐLd4t ÏeÕ / =]D cLFH³I>D8KÖ6Ñ³×eDidW0*\:Ii_:Z sT§ev Ì\6^Rs Q'@SYÆIGÇZ / '@Ëc Ì:2 s@*IGZW2 +ÈeD*]i*­:2:\6U^ =L®]T È2>5z /*Ê0c6g Ë c\6^Ø8Ù z O NÚÛÜ4Ý@;WÛDUH][ / \ ¿ÀUÁ =>d VS*\S­:2:=iT WX¸ CUae\ Y Z4c / D [c6Þß³ÜW9:àÜ s@IGZ DGáH0*\6^C^]0Z[]\c0Ú8+2 _ Á =S9@Ñ`3b `a:*\6^b cdfeEö g+h+ij3 âYã%äåæ¢%çYèwxy §SÂÃ]*\@QW5*Dé]*\8K8ê0d / ] ±ik²³<;lQW´E5DÂÃ]:*c:\6±i^²³;l´d6Ã*ÿ@Z / 00c @@lDL*\\:ëSc:DU«*¬W*\6^±²%;æ´6D>HC[<K:ü³c / e*`ec+lmD­:2:=ìíH*c>­:2:=L®]2>/5:c °µ­:2:=L®]2>5:c>­:2:¿=ÀUÁ DGFHJIGZ n'm^ ¿ÀUÁ­:2:=L®]2>58*MîSï5CI ­:2:=L®]2>5*D ¯° o'°meµ *cL@\ ÆÇ<±ic ²³;l´ED=>Âc>Ã0­:^ 2:=iÑ`b =D\@NÚÛÜS
4c:±i²³;l´ðÂÃî]/ Ü@9eM³;Y:B pe§]­e2*=>®e25ec q r%7D s't<§lv\±i²³;l´c6ÂÃ0^ñ0ò0óiô]òõ8öW÷ø
o!m%c ¿CÀ@Á =<D0­`2l=0®`245CÊeÑ¥b u!veY\­424=W®*25lù ¿ ¿4BGÀSúÁ ûMdD6F:H4
±i²³;l´¿4c6ÂÀSÃ0Á ^ý \Se^ \ c6þ¾idLT ÃeÿZ / =]­]D 2]=@c d>¸4{ º4³c \@üed>ÇH­e2*=>®<25ec =d omwx<§ yzD8ÑeÉs@IGZ>H][]\Uz @/ ÆÇs:2*2 ]c ¯0° cUþæ¾SD¿0æÐÀ6Á ^ ZJc ~'/ l *DL*8T\ {|}<É³bE±ia4²³K>;lÑ*´D@c6îÂÜWÃ09:^ M4;lB?p]§]
2 e2
lD6H4[]K §=:D °:µ I>Küezc  / °:µ  DLm *C\0Kê*c<ë@/ c§  _GaYbUc@@lDÂÃ]°*µ \WÊ@§ $<Kd\6^@@ÆÇ<dc :2 *2 eD*d q CDsG[lÐLîÜS5*D *\6^
GateKeeper

2008MI234

web3.2GK

SSLCommander

SSL

SSL[4][2](GK)run

accessFilter

GK

GK

GK

1

SSLCommander

GK

3.3

SSL

GK

C++

postgresql

GKlibpq

PC

3.4

• ADD

•
•

•

BAC

• SSLCommander

•SHOW

3.1

Commander
13

postgresql[1]
GK

•

1

•

DDEL

115

SSL

COUNT

[4]

DataBaseMan-PC

ager

1

:­ 2:z=L/®]2>5:c6ËÌ4Ñ`b*]D1l'm:*\Sü:c/ Ä³Å
d ë8u4s>ëYIU[i*]D ]
§:cSí]§ ]*\ // #>Æ'}<É³bEa4K7|<c[><]d8³\ ýÑYRb >³ê*\c =S9:N0DUH *\6^_Sc =S9:N@c lD ] %'&CD / ±i²³;l´ ¸º4c6*c/4§W¸0º*\:_:s6d4ÏeÕ ­: 2:=L®]2>5
*MîSï5CI CUa0Z[]\GËÌs Ñ`b
*]D1l'm:*\:_:sT§ev8\6^
4 ç"! NÚÛÜS:c \ ° 5Bc6$#*dV*IGZB% \i^>Á #&$'ld z / xy )D>9l;L5ILK DGáHJI ( § * +fq@c@?<ACB, B22]
DLHe[Z> #&"'JD 1î`Ý .0/U2*=@22 ILKi^ TOTALMEDIAN---------------------------------------------

MOST[108] local 192.168.1.1 port 50421 connected

AVERAGEwith 192.168.2.1 port 5001
[ ID] Interval
Transfer

Bandwidth[108]

458 Kbits/s

44ADD

0.0-10.0 sec

560 KBytesec
Server : iperf -s--------------------------------------------Server listening on TCP port 5001
TCP window size:

85.3 KByte (default)---------------------------------------------

Ubuntu10.04(32bit OS)[ 9] local 192.168.2.1 port 5001 connected w
ith 192.168.1.1 port 50421

PC

GINE[3][ ID] Interval

TransferBandwidth

[ 9]
ec

560 KBytes

458 kbits/s

0.0-10.0 sec

p%sR % / ST]T6UWVWZ[]\8K8ê / >%I?
Å */8Tg CUa0Z[]\:_:sTIX]Ñ4 \6^
K cY =S9:N@c d4Ï>\ / ±i²³;´ / %I?¹%ILK / \ ° / /±i²³;l´ [ Z@aC<ë >p<d IGZ[]\:_:sSD[B'YILKi^
5 \^]`_C+wxy § z / d   5BEDG@]*\S­:2:=L®]2E 346578:9<;= E
5:c6s­:2:=L®]2>5*DGFHJIL/K6*]D a]4NÚcL:Ä |*c]5 B§ z / Â]Ã<§@<%s :I>K*±8²`;%´ c6Û]ÜS]*dDÂµbÃ%ILILKiKi^`^ _Ga4d4Ï8uiZ
I@? \ ° I / ::<*DAeÿ0Z:[*/ \8Ñ<DB4³\i/^ Ä ec cdjs@ IG/Z / \ e<c¿fÀUgCÁ D hO \ Ád yi]Á *° \CT >æ
h d= ;WÛ 2 DcDFEILT >"BCdCia]Z:[e\>Ñ³D î0Ü@94Me;YB$p QW5*D1*2G*2p / ­:2:=L®]2>5 p]§IHCDÂluiZIB'YILKi^ 2µ *\U:eDÂÃ]*\:_:s§<ÏelÕ kme@t:QW5*[D 1*\:_:sFT nU·C\*s oÿ]\6^
prqtsvuÊec:±i²³;l´EDAYILK
_ / / * z
T'nm CWaCK8^0`Ü A:2<=02Ñæbc JKCTIÑ%b³cW]@ L*d +"MeC\*_ w0x >y "/ z|{ >$} - ~e°0/Fi0$0e 4D/G é*\W]2B 2S e20cL¨©æs ~%xPssGt]\6^/,<üe6d JFK³T +"MUCSa*Z][<\8ÑCD ?`AJB 2*î@ËÌ = ËÌ5¥NB L`Ps O0Q@Ï4Ð6d DUF0HYISK 04§ B  X-4/ ?eA³B  , 2/ [î  1 2 c KWê0c cL@x:y ]c6ÂÃ  % x[  *\6^ËÌ ËÌ $ - ::<]Q@50:4d *É]\ ïJAOQlRW;Wc  q^0$s h@jet 2B M0î>ï5>]4c0 /F  % /F x   @ 0:Ë0Ì x:y$ËÌ >

3

ADD

BACK SHOW COUNT DDELGK

2Commander

IDS

ADD|4|IN|192.168.1.1|255.255.255.255|192.168.
2.1|255.255.255.255|ANY|0|0|TOTAL|1.0|0|1

DELAY[1] Joshua D. Drake: Postgresql :Welcome
http://www.postgresql.org/(accessed Apr.2011).

1.0msec

192.168.1.1[2]

192.168.2.1(2006).

iperf[3]TCP

GINE(2010).

Attacker : iperf -c 192.168.2.1[4]--------------------------------------------Client connecting to 192.168.2.1, TCP port 50
01

TCP(2010).

TCP window size: 16.0 KByte (default)

2