防火墙与入侵检测系统结合的安全模型设计

Design of Cooperated Security Model Based on Firewall and IDS

近年来,入侵检测系统(IDS)作为一种积极主动的安全防护技术得到了广泛的重视,被认为是防火墙之后的第二道安全闸门。本文从多方面对防火墙与IDS的特性进行了分析,提出了一种防火墙与IDS互动的安全模型,并给出了一个实例,以使网络的安全防御能力大大提高。

Recently, as an active technique of insurance guard, intrusion detection system has received more and more concern and been treated as the second safe-gate behind the firewall. In order to enhance the ability of safe defense, this paper analyzes the features of firewall and IDS from many aspects, proposes a cooperated model composed by firewall and IDS, finally it offeres an example.