| 基于Linux的网络入侵检测与防火墙集成系统的设计与实现 |
| |
| 引用本文： | 李健,王玲,董科军,李俊.基于Linux的网络入侵检测与防火墙集成系统的设计与实现[J].微电子学与计算机,2006,23(4):18-22. |
| |
| 作者姓名： | 李健 王玲 董科军 李俊 |
| |
| 作者单位： | 1. 中国科学院计算机网络信息中心,北京,100080;中国科学院研究生院,北京,100080
2. 中国科学院计算机网络信息中心,北京,100080 |
| |
| 摘 要： | 作为网络安全领域的两大技术，入侵检测系统与防火墙仍然存在一些自身无法解决的问题。在入侵检测系统与Linux内核Netfilter总体框架的基础上，文章提出了集成网络入侵检测系统（NIDS）与防火墙（iptables）系统总体框架．详细介绍了对该框架各模块的初步实现，最后分析了该系统的优缺点。
|
| 关 键 词： | 入侵检测系统 防火墙 |
| 文章编号： | 1000-7180（2006）04-018-05 |
| 收稿时间： | 2005-06-14 |
| 修稿时间： | 2005年6月14日 |
Integration System Design and Implementation of Network Intrusion Detection and Firewall Based on Linux |
| |
| LI Jian,WANG Ling,DONG Ke-jun,LI Jun.Integration System Design and Implementation of Network Intrusion Detection and Firewall Based on Linux[J].Microelectronics & Computer,2006,23(4):18-22. |
| |
| Authors: | LI Jian WANG Ling DONG Ke-jun LI Jun |
| |
| Affiliation: | 1 Computer Network Information Center, Chinese Academy of Sciences, Beijing 100080;2 Graduate School of the Chinese Academy of Sciences, Beijing 100080 |
| |
| Abstract: | As two important technologies in the field of Network Security, there are still some problems of both Intrusion Detection System and Firewall which can't be solved. Based on brief introduction to the framework of the Network Intrusion Detection System and Linux's kernel firewall- Netfilter, this dissertation brings forward the system about the integration of NIDS and iptables, and finally describes every module's realization with analyzing both advantages and disadvantages regarding to this system. |
| |
| Keywords: | NIDS Netfilter iptables |
| 本文献已被 CNKI 维普 万方数据 等数据库收录！ |
|
