基于Linux的网络入侵检测与防火墙集成系统的设计与实现

Integration System Design and Implementation of Network Intrusion Detection and Firewall Based on Linux

作为网络安全领域的两大技术,入侵检测系统与防火墙仍然存在一些自身无法解决的问题。在入侵检测系统与Linux内核Netfilter总体框架的基础上,文章提出了集成网络入侵检测系统(NIDS)与防火墙(iptables)的系统总体框架,详细介绍了对该框架各模块的初步实现,最后分析了该系统的优缺点。

As two important technologies in the field of Network Security, there are still some problems of both Intrusion Detection System and Firewall which can＇t be solved. Based on brief introduction to the framework of the Network Intrusion Detection System and Linuxls kernel firewall- Netfilter, this dissertation brings forward the system about the integration of NIDS and iptables, and finally describes every module＇s realization with analyzing both advantages and disadvantages regarding to this system.