网络入侵防御系统高可用性研究

本文分析了NIPS实用化面临的诸多挑战,给出了一些提高NIPS可用性的设计原则,并在简单比较了两种常 用NIPS硬件平台,即网络处理器和专用集成电路的特性后,给出了一种基于网络处理器、负载平衡器和IDS集群的NIPS 框架结构设计。

Research on High Availability of Network Intrusion Prevention System

Network Intrusion Prevention System(NIPS) was developed to provide a novel solution to network security. NIPS both detects and identifies, and proactively prevents varies attacks from reaching their intended targets. Unlike firewalls, NIPS is significantly more complex. The complexity stems mainly from the need to analyze not just packet headers but also packet content and higher-level protocols. Implementing the various detection techniques for NIPS can require a large amount of computing power. This paper analyses the challenges to the utility of NIPS and then gives some principles to design high availability of NIPS. After comparing the characteristics of two main hardware platforms regarding of the architectures of a NIPS,,e.g. Network Proces-sor( NP), Application Specific Integrated Circuit (ASIC), we propose a skeletal architecture of NIPS based on NP?Load Balancer and IDS cluster. The features of high availability of this skeletal architecture is also presented in this paper.