联动防火墙的主机入侵检测系统的研究

The Research of Host Intrusion Detection System Related with Firewall

联动防火墙的主机入侵检测系统可以实时监测主机的各种状态,辨别可能发生的入侵行为或非法操作,在入侵行为发生时联动防火墙进行自动阻断和报警,实时保护主机系统信息安全。这里主要介绍其中的端口扫描和木马检测两个模块。

Host Instrusion Detection System related with Firewall can monitor the host computer's various states at real time , distinguish the intrusive action or illegal operation of possibly occurring,and voluntarily stops the illegal operation related with Firewall and gives an alarm when the intrusive action occurs,and protects the host computer's system information security.This paper introduces the port scan and Trojan horse detection model pieces in it.