内置入侵检测功能的防火墙设计

The Design of Firewall with Intrusion Detection Function

给出了内置入侵检测功能的防火墙设计方案,将入侵检测功能与用户设置安全策略集成一体。即使安全策略允许所有通信流量传输,入侵检测功能仍具备检测和拦截极具攻击性的行为和企图,增强了防火墙的功能,为网络防卫带来了灵活性。

In this paper,the design of firewall with intrusion detection function is presented,which integrates the intrusion detection function with security policy setting.Even if all the network flow are permitted by the firewall,the intrusion detection system will detect the suspicious network data.The design improves the firewall function,and gives a flexible way to protect the networks.