网络安全防御系统

Defended System of Network Security

该系统结合主／被动防御,能提高入侵检测实时性、准确性。针对主机／网络入侵检测实现,并通过伪服务器保护真正服务器。分析收集的入侵信息产生防御策略发送至防火墙以阻止攻击。该防御体系包括管理中心、防火墙、伪服务器、数据收集器等。管理中心主要完成入侵信息／策略的分析／制定及与其它主机通讯的加密、认证。

Defended system of network security integrated active and passive recovery has function of real time detection and veracity. Aiming at the complementary ascendance realized with intrusion detection of host computer and network, the server was protected with pseudo server. Gathered intrusion information was analyzed to generate defended strategy, and sent it to firewall to prevent to attack. Defended system includes management center, firewall, pseudo server and data gatherer. The management center completes to analyze intrusion information and strategy, to establish anti- intrusion strategy and encrypt and authenticate the communication of other host computer.