分布式入侵检测系统和防火墙技术结合的研究与实现

Investigation of integrated system of distributed intrusion detection with firewall and its implementation

对分布式入侵检测技术和防火墙技术进行了分析,提出了结合分布式入侵检测和防火墙技术的一种新方法,即:防火墙作为访问控制设备,分布式入侵检测系统作为发现入侵信号的设备,它们之间协同工作,在功能上互为补充,形成整体的合力,实现了网络安全的多层次防御.

The techniques of distributed intrusion detection system (DIDS) and firewall are analyzed and a new way to integrate DIDS with firewall is presented, where the coordinate work of the firewall as a facility of control access with the DIDS as a facility of intrusion signal discovery is emphatically discussed so that their functions can be supplemented with each other to form a resultant entirety and realize multilevel protection of network safety.