基于代理的分布式防火墙与入侵检测协同防御系统设计与应用

The Design and Implementation of Agent-based Intrusion Detection Defense System Cooperated with Distributed Firewall System

分析了传统防火墙和现有分布式防火墙在网络应用中的局限性.将防火墙与入侵检测相结合,提升了系统的防御能力.引入Agent技术,利用Agent的特性对防御系统重新规范、设计,改变以往各防御单元的通信方式,并且在防御系统中增加了中心服务器和域服务器的备份,更好地提高了网络的稳定性、安全性.

The paper makes an analysis of limitations of traditional firewall and current distributed firewall in net application.The integration of firewall and intrusion detection can raise the system＇s defense.It is more steady and safer for the net to introduce Agent technology and re-regulate and re-design the defense system and change the communication modes of defense units,and to add back-ups of central server and domain server.