基于内部网络安全的防火墙系统的改进  

Improvement of firewall system based on internal network security

作　　者：于振海[1] 

机构地区：[1]山东理工大学计算机教学部,山东淄博255049

出　　处：《山东理工大学学报（自然科学版）》2007年第2期68-70,73,共4页Journal of Shandong University of Technology:Natural Science Edition

摘　　要：针对传统的边界防火墙不能防范来自内部的攻击、效率较低和故障率高、网络应用受到结构性限制等问题,提出了把分布式防火墙系统和分布式入侵检测系统结合在一起的安全防御系统.由防火墙进行访问控制,入侵检测系统检测入侵行为并反馈入侵信息,中央控制平台对各模块统一管理和配置,从而为内部网络提供了立体的、多层次的防御.Traditional boundary firewalls often fail in preventing network from internal attack and they are low in efficiency and high defect rate. Their application in the network is limited by the constructional constraints. In order to overcome these defects, a new security system which combines the distributed firewall system and distributed intrusion detection is proposed. Inthe new security system, access control is performed by firewall while the intrusion detection system detects intrusion action and reflects intrusion information. And the central control unit manages all sub-modules. That new system can effectively provide the intranet with solid, multi-level protection.

关 键 词：分布式防火墙 分布式入侵检测系统 网络安全 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]