基于防火墙的分布式网络入侵检测模型设计.pdfVIP

No. 3 3 Jun. , 2011 M ICROPROCE SSORS 2011 6 1 1 2 1 杨婷婷 , 杨大全, 贾树文 , 刘小飞 ( 1. 海南大学三亚学院理工分院, 三亚 572022; 2. 海南大学三亚学院教务处, 三亚 572022) : 随着网络安全问题日趋突出, 入侵检测系统 为 一门新兴技术成为广泛关注的焦点, 它能够及时检测入侵行为, 迅速做出响应, 但仍存在不能阻止攻击等缺点因此, 在分析入侵检测 系统分布式入侵检测系统的结构及防火墙技术基础上, 提出了一个分布式网络入侵检测与防火墙 技术集成的模型实现网络安全 : 入侵检测系统; 分布式网络入侵检测系统; 防火墙 DO I: 10. 3969/ j. issn. 1002- 2279. 2011. 03. 012 : TP319 : A : 1002- 2279( 2011) 03- 00 2- 03 Mode l of D istributed Netw o rk Intrus ion Detec tion System Des ign Based- on firew a ll 1 1 2 1 YANG T ing- ting, YANG Da- quan , JIA Shu- w en , L IU X iao- fei ( 1. dep ar tm ent of Sc ience and Tech no logy, H a inan un iv ersity sanya colleg e, sany a 572022, Ch ina; 2. D ean s off ice of H a inan un iv er sity sanya colleg e, sanya 572022, Ch ina ) Abs tract: W ith netw ork security becom ing more and more mi portant, intrusion detection system is a k ind of novel technology and becomes the focus of newt ork security, w h ich can detect the action of intruding and response rapidly, but it has some w eaknesses, such as preventing attack. Therefore based on the characteristics of intrusion detection system, D istributed Intrusion D etection System and the technology of firew al,l the paper provides a new model of comb in ing the firew all and distributed intrusion detection system together to protect newt ork. K ey w ords: Intrusion detection system; D istributed intrusion detection system; Firew all ; 1 , , ,