入侵防御系统(IPS)的技术研究及其实现

入侵防御系统是网络安全领域为弥补防火墙及入侵检测系统(Intrusion Detection System)的不足而新发展起来的一种计算机信息安全技术.不同的入侵防御系统实现的方式各不一样,但其共同点是综合了防火墙防御功能和入侵检测系统的网络数据包检测功能,紧密实现了上述两安全系统的互动互利,对受保护网络进行更为完善的保护.论述了入侵防御系统的两种体系结构,并对其中的关键技术作了介绍.在最后提出了一个入侵防御原型系统的实现方式以供探讨.

Research on Intrusion Prevention System and Its Implementation

Intrusion detection and protection technology is a new information security technology which could supply a gap of the firewall and the intrusion detection system in the information security domain. Different intrusion prevention system has different realizing method. The common ground of different intrusion prevent system is that all combine the prevent function of the firewall with the network data packets detection function of the intrusion detection system. Operating with each other, the firewall and intrusion detection system provide more complete protection for the network.. At last this paper brings forward a intrusion prevention system frameworks for research.