分布式防火墙的网络安全系统研究.pdfVIP

第34 卷 第3 期 电 子 科 技 大 学 学 报 Vol.34 No.3 2005 年6 月 Journal of UEST of China Jun. 2005 分布式防火墙的网络安全系统研究 刘 喆，王蔚然 ( 电子科技大学电子工程学院 成都 610054) 【摘要】针对单一的网络安全技术已经无法很好的解决日益复杂的网络安全问题，提出了一种新型的安全系 统。该系统基于分布式防火墙环境，结合分布式入侵检测技术，并利用专家系统使两者协同工作，实时检测并响 应动态的网络安全事件，弥补了单一网络安全系统的不足，可以很好的满足网络安全的要求。 关 键 词 分布式防火墙; 分布式入侵检测; 专家系统 中图分类号 TP393 文献标识码 A Study of Distributed Firewall Based Security System LIU Zhe ，WANG Wei-ran (School of Electronic Engineering, UEST of China Chengdu 610054) Abstract Traditional single security technology is becoming obsolete with the complexity of network security problems increased. To address this problem , a new security system architecture is proposed. This new system is based on the distributed firewall environment, and distributed network intrusion detection technology is integrated. Furthermore, Expert System is utilized to make them work coordinated and intelligently respond the real-time dynamic network security situations. This scheme can make up for the shortcomings of single security system and fulfill the requirement of network security. Description of this system architecture and some important system details are presented in this paper. Key words distributed firewall; distributed intrusion detection system; expert system 网络攻击主要以网络协议自身的不安全性和操作系统、应用程序的bug或弱点这两种途径作为切入点， 采用的形式越来越复杂。而网络攻击工具在网络上广为传播，人们可以很容易的利用这些工具对计算机网 络系统造成破坏，造成严重损失。CSI/FBI Computer Crime and Security Survey调查结果显示，被调查组织由 网络