插件式网络安全集成防护框架

随着Internet的普及，网络安全问题越来越成为令人关注的问题。单一的入侵检测或者是防火墙系统很难对系统进行有效的防护。如果能整合入侵检测和防火墙形成一种有机的新系统，将能较好地克服两者的缺陷。这里面临了两个问题：一方面需要一种框架能集成新的子系统，即集成入侵检测系统，融合不同的检测技术，同时集成管理不同类型的防火墙，形成结合边界防火墙的分布式防火墙；另一方面需要一种机制，能自动判定入侵检测系统的告警，生成相应的防火墙规则阻断攻击。为了集成不同类型的子系统，我们提出了一种插件式的框架，通过添加插件，它能够集成管理不同类型的防火墙和入侵检测系统，通过该框架的抽象，提供了一种告警自动响应的机制。

Pluggable Network Integrated Protection Framework

With the development of internet, the network security becomes attraction. It is hard to be satisfactory if only use separate firewall or intrusion detection system. If we could integrate the two systems we could protect net- work better. There are two problems: one is that we need to integrate different type firewalls and different type IDS. The other is that the alerts from IDS need analyzing and create relative firewall rules to block attacking. We present a framework that could integrated different type firewalls and intrusion detection systems with pluggin and could col- laborate firewall with IDS.