基于snort的入侵防御系统的技术研究和实现-河北科技大学学报.pdfVIP

26 4 Vol. 26, No .4 2005 12 Journal of Hebei University of Science and T ec nology Dec. 2005 : 1008-1542( 2005) 04-0316- 06 Snort 王志伟, 郭文东 ( 河北科技大学经济管理学院, 河北石家庄 050018) : 针对网络安全防御问题, 论述了入侵防御系统 2 种体系结构 网络IPS 和主机IPS, 介绍了防火墙和PS 之间互动 实现方式通过将Snort 安装为内嵌模式, 利用 snort-inline, 结合 内嵌式互动技术和外联式互动技术, 设计并实现了一种基于Snort 具备了初步入侵防御功能 原型系统 : IPS; IDS; 防火墙; Snort : T P393. 08 : A Researc on intrusion prevention system based on Snort and its implementation WA NG Z -i w ei, GUO Wen-dong ( College of Econom ics and Management, H ebei University of Science and Tec nology, S ijiaz uang Hebei 050018, C ina) Abstract: Focusing on t e problem of netw ork security prevention, t is paper as discussed two kinds of system structure of intrusion prevention syst em( IPS) suc as as netw ork intrusion prevention system ( NIPS) and ost-based int rusion prevention system( H IPS) , and as made an introduction to t e implementat ion betw een t e IPS and t e firew wall.T roug installing t e Snort inline, utilizing snort-inline, and combining t e inline interaction tec nology and outside unit ing interaction tec nology, t is paper as designed and realized a prototype system,w ic is based on Snort and possesses t e preliminary function of intrusion prevention. Key words: IPS; IDS; firewall; Snort , 1 , ( Intrusion Detection System, IDS) [ 1] 2 , MS-SQ L Slammer , , , IDS ( Intrusion Prevention System, IPS) , IPS , , 2 , 1 IPS IPS , , , : 2005-05-31; : 2005- 09-07; : : ( 042135110) : ( 1982- ) , ,, , 4 Snort 317 , [ 2] IDS , IPS 2 : IPS( N IPS) IPS( HIPS)