摘要
针对传统包过滤防火墙的缺陷,即策略固定无法根据入侵调整策略,引入Snort入侵检测系统。实现了防火墙和入侵检测系统的联合,减少了安全防护管理人员的参与。设计并实现了根据入侵检测结果动态地调整防火墙规则的机制,从而使得整个系统可以对已知的网络攻击以及某些未知的网络攻击进行有效的拦截,完成了一定程度上的自动检测、自动防御,并且整个系统具备了一定的学习能力,给个人用户以及小型网络用户构建了一个比较全面的安全防护体系。
Based on the traditional firewall can not be adjusted according to the invasion strategy inadequate, combining Snort intrusion detection system, achieved a firewall and intrusion detection system of joint. Based on the introduction of intrusion detection results of the dynamic adjustment mechanism for the firewall rules,achieve a certain degree of automatic detection, automatic defense, and have a certain ability to learn. Deal with certain unknown attacks, for individual users and small network users building a more comprehensive .security protection system.
出处
《计算机技术与发展》
2008年第5期156-158,F0003,共4页
Computer Technology and Development
关键词
网络安全
包过滤
防火墙
入侵检测
network security
packet filtering
firewall
intrusion detection
