Linux下集成Iptables与Snort构筑安全防护体系

Set up Security Defense System of Integration Iptables and Snort Based on Linux

当前网络安全技术中的防火墙技术和入侵检测技术已经发展得比较成熟,但是各有其优缺点。把防火墙与入侵检测系统集成使用进行网络防护,顺应了网络安全发展的需要,弥补了两者的不足之处。文章在详细地阐述网络入侵检测系统Snort和防火墙Iptables扩展机制的基础上,描述了两者联动的设计和实现,并对其安全性进行了讨论。

Network security technology in the current firewall technology and intrusion detection technology has been developed more mature,and has its own advantages and disadvantages.The integration use of firewall and intrusion detection systems for network protection,meets the needs of the network security development and makes up the inadequacies of the two.In this paper,makes the detailed description of network intrusion detection system Snort and Iptables firewall expansion mechanism and the description of both between the design and realization of the linkage,and its security is discussed.