入侵防御系统可信通信协议的设计与实现  

Design and Implementation of Trusted Communication Protocol for Intrusion Prevention System

作　　者：袁本雯[1] 赵阔[2] 孙鸣迪[2] 胡亮[2] 

机构地区：[1]吉林广播电视大学,长春130022 [2]吉林大学计算机科学与技术学院,长春130012

出　　处：《吉林大学学报（信息科学版）》2010年第1期34-40,共7页Journal of Jilin University（Information Science Edition）

基　　金：国家自然科学基金资助项目(60873235);教育部新世纪优秀人才支持计划基金资助项目(NCET-06-300);吉林省科技支撑计划重点基金资助项目(20080318)

摘　　要：入侵防御系统主要基于入侵检测系统和防火墙之间的联动,而它们各自能识别和维护的数据格式往往是不同的。此外,这些敏感数据通常是在开放的网络环境中传输的,面临各种安全威胁。为此,引入可信通信的概念,设计并实现了基于XML(eXtensible Markup Language)的可信通信协议。与同类工作相比,该协议可实现异构操作环境下入侵检测系统与防火墙之间的安全数据传输,并可进一步扩展支持各种网络安全产品和网络管理设备,对于实现这些设备之间的数据融合,检测复杂的分布式网络攻击具有一定的参考价值。Intrusion prevention system are mainly based on the correlation between intrusion detection systems and firewalls,and the data format applied to identification and maintenance for both is usually different. These sensitive data are often transmitted in the open network environment,which faced with various security threats. To solve these problems,the trusted communication is introduced. The design and implementation of trusted communication protocol based on XML （eXtensible Markup Language） is provided. Compared to related works,this protocol achieves the implementation of secure data transmission between intrusion detection systems and firewalls in the heterogeneous environments,and scaled to various network security products and network management devices,which contributes to the data fusion among these devices and the detection of distributed network attacks.

关 键 词：可信 通信协议 可扩展标记语言 传输层安全协议 公共对象请求代理体系结构 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]