一种深度入侵防御系统的研究和设计  

Study and design of intrusion defense-in-depth system

作　　者：刘林强[1] 宋如顺[1] 徐峰[1] 

机构地区：[1]南京师范大学计算机科学系,江苏南京210097

出　　处：《计算机工程与设计》2005年第6期1522-1524,共3页Computer Engineering and Design

摘　　要：分析了传统的入侵防御系统,在指出其优势和不足的基础上,把检测事件分为3类,结合多传感器数据融合技术和入侵容忍技术,提出一种基于深度防御原则的“检测防御-分析响应”双层防御模型。为解决传统入侵防御系统易于导致新的拒绝服务攻击等问题提出了一种方案,并且在一定程度上提高了系统性能。通过仿真实验验证了该模型检测和防御入侵的可行性。The traditional IPS is analyzed and its advantage and insufficiency are poiated, then data fusion algorithm of multi-sensors is combined, and a 'detection and defense - detection and response' model based on defense-in-depth theory and the intrusion tolerance is proposed. This model resolves new DoS attack to which IPS is likely to lead and improves the capability of IPS to some extent. The simulation results validate the feasibility of this model's detection and prevention of intrusion.

关 键 词：入侵防御 深度防御 数据融合 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]