| 分布式高速网络入侵防御系统研究 |
| |
| 引用本文： | 康晓宁,蒋东兴,张承,刘启新,周霖,吴海燕.分布式高速网络入侵防御系统研究[J].小型微型计算机系统,2005,26(11):1928-1932. |
| |
| 作者姓名： | 康晓宁 蒋东兴 张承 刘启新 周霖 吴海燕 |
| |
| 作者单位： | 清华大学,计算机与信息管理中心,北京,100084 |
| |
| 摘 要： | 网络的安全问题日益严重，DoS,DDoS等暴力攻击成为千兆级别高速网络上的主要攻击手段，蠕虫的传播占据了大量的网络带宽．传统的入侵检测系统不能有效地处理大量的网络数据，且无法及时阻断检测到的攻击行为.本文针对以上问题,提出了一种可有效运行在高速网络上的分布式入侵检测与阻断系统．此类系统也称为入侵防御系统IPS（Intrusion Prevention System）．
|
| 关 键 词： | 分布式 高速网络 入侵防御系统 |
| 文章编号： | 1000-1220（2005）11-1928-05 |
| 收稿时间： | 2004-05-14 |
| 修稿时间： | 2004-05-14 |
Research on Distributed Intrusion Prevention System on High-Speed Networks |
| |
| KANG Xiao-ning,JIANG Dong-xing,ZHANG Cheng,LIU Qi-xin,ZHOU Lin,WU Hai-yan.Research on Distributed Intrusion Prevention System on High-Speed Networks[J].Mini-micro Systems,2005,26(11):1928-1932. |
| |
| Authors: | KANG Xiao-ning JIANG Dong-xing ZHANG Cheng LIU Qi-xin ZHOU Lin WU Hai-yan |
| |
| Affiliation: | Computer and Information Management Center, Tsinghua University, Beijing 100084, China |
| |
| Abstract: | Network security is getting more important as the Internet evolves.Attacks like DoS,DDoS have become major attack methods on gigabit networks,not to mention the worms have used up network bandwidth.Traditional IDSes could not handle massive network data efficiently or block detected attacks in time.Focusing on those problems,this paper designed a distributed intrusion detection and blocking system which can run on high-speed networks efficiently,which is also known as IPS(Intrusion Prevention System). |
| |
| Keywords: | distributed high-speed networks IPS |
| 本文献已被 CNKI 维普 万方数据 等数据库收录！ |
|
