基于入侵检测的分布式防火墙系统

Research on IDS-based Distributed Firewall System

提出了一种新型的基于入侵检测的分布式、自适应防火墙系统。这种分布式防火墙系统采用主防火墙和主机防火墙构成的分布式结构,并由中央决策与控制器处理来自入侵检测功能模块的反馈信息,实现自适应的安全策略,因此可以有效克服传统防火墙的缺陷,防范内部攻击,提供一致的安全策略,同时避免了单点失败以及成为系统瓶颈。

This paper proposes a new IDS-based distributed and adaptive firewall system. The distributed firewall system consists of the gateway-firewall and host-firewalls, and the center-controller manages the feedback message from IDS to provide a adaptive security policy. By the new distributed and adaptive firewall system, it can hurdle limitations of traditional firewall effectively, such as insider attacks, consistent security policy, bottleneck and single point of failure.