基于策略的入侵防御系统模型的研究

A Policy-based Intrusion Prevention System

防火墙和入侵检测系统是当前广泛使用的网络安全保护设备,在预防网络攻击和入侵方面起到了至关重要的作用,但它们自身存在不可避免的缺陷降低了实际使用时提供的保护功能。因此为了进一步提高网络安全性,设计一个能够集成多种安全技术的优势同时又能弥补各自不足的新的网络安全保护技术,已经成为当前人们的追求。提出基于策略的入侵防御系统(PB-IPS)目的在于实现安全管理与网络管理系统真正的结合,以网络管理系统为中介,将防火墙技术和入侵检测技术融于一体,实现全新的网络安全保护措施。

Firewall and Intrusion Detection System can enforce security of the network effectively, but there are also drawbacks existing in themselves. To enhance the security of the network furthermore, integrating isolation function of the firewall and IDS while avoiding their limitations is a good idea. The policy-based intrusion prevention system, which integrating security management into network management system and realizing functions of firewalls and IDS through NMS, is an entirely new and effective security protection technology.