基于ACE和SSL的Firewall与IDS联动系统研究

随着Internet的迅猛发展，网络攻击的方法和技术越来越智能化和多样化，网络安全需求与日俱增。传统的防火墙（Firewall）与入侵检测系统IDS已不能满足网络安全整体化需求。鉴于此，引入ACE网络通信中间件和SSL协议，采用开放接口方式，从网络安全整体性与动态性的需求考虑，设计了一种新型的基于ACE和SSL通信平台的Firewall和IDS协同联动系统模型。该系统模型融合了Firewall和IDS的优点，采用加密信息传输机制、策略管理机制和联动分析算法，确保了传输信息的可靠性、完整性和机密性。实验结果表明，该联动系统不但能够有效地检测和防御攻击，而且具有良好的协作性、通用性和可扩展性。

Research of the linkage system of firewall and intrusion detection system based on ACE and SSL

With the rapid development of Internet, some intelligent attack methods and techniques are increasing. The network is easily attacked by hackers or malicious software. The safty problem is increasingly outstanding in computer network. The traditional technologies of firewalls and Intrusion Detection Systems (IDSs) own poor security, high false alarm rate, and low level of intelligence. Considering the demands of obtaining integrity and dynamics in network security, a novel linkage system model of firewall and IDS based on open communication platform of ACE (Adaptive Communication Environment) and SSL (Secure Socket Layer) is proposed. This system model combines the advantages of firewall and IDS, and uses the encrypted information transmission mechanism, and the policy management mechanism, and the associated linkage analysis algorithms to ensure the reliability, integrity and confidentiality of the transmitted information. Experimental results show that the linkage system can effectively prevent network from attacks, and possesses better cooperativeness, universalness and expansibility.: