浅析IDS及IPS网络安全深层防护策略

随着网络入侵事件的不断增加和黑客攻击水平的不断提高,传统的防火墙或入侵检测技术(IDS)已显得力不从心,这就需要引入一种全新的技术-入侵防护(IntrusionPreventionSystem,IPS)。本文在分析IDS不足的基础上,探讨了IPS的工作原理和技术特征及其面临的挑战。并探讨了未来网络安全深层防护的策略。

Analysis of IDS and IPS Network Security In-depth Protection Strategy

With the network intrusion event increasing and the hacker attack level enhancing, the traditional firewall orthe intrusion detection technology (IDS) has appeared to lack the ability to do what one would like, this needs tointroduce one kind of brand-new technology-intrusion protection (Intrusion Prevention System, IPS). Based on theanalysis of insufficient IDS,this paper discussed the IPS principle of work and its technical characteristic and thechallenge it faces. And it also discussed the future network security in-depth protection strategy.