Linux平台下网络入侵防御系统的研究与实现

针对防火墙和入侵检测系统在网络安全防御上存在的缺陷，本文提出了一个在Linux平台下，基于两层防御机制的网络入侵防御系统．该系统扩展了网关防火墙的入侵检测功能．实现了网关防火墙对攻击的最初防御，增加了入侵检测系统Snort的联动响应功能，Snort对逃避了网关防火墙检测的复杂攻击进行再次防御．实验结果证明，两层防御机制对大规模的蠕虫攻击起到了实时抵制作用．

Research and Implementation of Network Intrusion Prevention System under the Linux Platform

Focusing on the defects of the firewall and the intrusion detective system in network security prevention,the article proposed a network intrusion prevention system under the linux platform based on the two-level defense mechanism.The system explanded the intrusion detective function for the gateway firewall which could defend the attack at the first level,and increased the interaction with firewall for Snort so that Snort could defend the complex attack which had evaded the detection of the gateway firwall...