基于中间件的防火墙与入侵检测系统联动研究

Research of Interaction Middleware with Firewall and Intrusion Detection System

针对传统的防火墙与入侵检测系统联动模型中自身安全性差、误报率高、智能化程度低的不足,提出了一种新的基于中间件的防火墙与入侵检测系统联动模型。该模型采用信息传输加密机制、联动策略管理和关联分析算法,提高了联动系统的效率和性能。该联动模型从网络安全全局性和动态性的需求考虑,实现了对网络攻击的主动防御。

The traditional firewall and intrusion detection system cooperation model of its own poor security,false alarm rate,low level of intelligence,this paper proposes a new middleware-based firewall and intrusion detection system linkage model.This model uses encrypted information transmission mechanism,policy management and associated linkage analysis algorithms to improve the linkage system efficiency and performance.The linkage model from network security and dynamic nature of the global demand for consideration,implement proactive network attacks.