组合出入口访问控制的防火墙系统研究  

Study on Firewall System Combining Ingress and Egress Access Control

作　　者：黄晓波[1] 殷克功[1] 王晓华[1] 贠永刚[1] 

机构地区：[1]徐州空军学院基础部,徐州221000

出　　处：《计算机与数字工程》2009年第9期102-104,183,共4页Computer & Digital Engineering

摘　　要：针对军事网络特殊安全需求,提出了一种组合出入口访问控制的网络边界安全防护手段,在抗网络攻击方面,采用包过滤防火墙与基于神经网络和基于协议分析和规则匹配的入侵检测技术相结合的方法,提高入侵检测的准确性;在防信息泄密方面,在出口访问控制中引入身份认证机制及内容审查和过滤机制,可建立更灵活的安全审计和访问控制策略,有效阻截敏感或涉密信息外泄,实现对泄密源的有效跟踪。To satisfy the special needs of military networks, a protection method combining ingress and egress access control for network edge security is proposed. On the side of dealing with network attacks, a combined mechanism of packets filtering firewall and intrusion detection system based on artificial neural network and rule matching is implemented, to increase the accuracy of intrusion detection. On the side of prohibiting secret leakiness, techniques of identity authentication and contents filtering are integrated into the mechanism of egress access control, so strategies with more flexibility in security auditing and access control can be implemented, the sensitive or secret data can be blocked from leaking out and the source of leakage can be traced effectively.

关 键 词：军事网络 防火墙 入侵检测 身份认证 人工神经网络 内容过滤 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]