网络安全主动防护体系研究及应用

Study on Network Security Active Defense Architecture and its Application

在分析大型复杂计算机网络的安全形势基础上,文章阐述了发展主动防护体系的重要性,讨论了其功能需求。提出了一种结合应用异常检测与滥用检测的入侵检测模型(AMIDS),并以其为核心构建了网络安全主动防护体系,研究了其关键技术,最后给出应用实例。

Basing on the research work about the security situation of large-scale,complex computer networks,the im-portance and functional requirement of active defense architecture are discussed in this paper.The AMIDS model in which both anomaly detector and misuse detector are used is presented.Further,authors have developed a network secu-rity active defense architecture using the AMIDS model as a core.At the same time ,other key technologies are dis-cussed.Lastly,an application sample is given.