基于DFW和IPS的网络安全控制与防御系统  

Network security control and cooperation defence system based on distributed firewall and intrusion prevention

作　　者：祁钰[1] 申永军[1] 杨玉亮[1] 

机构地区：[1]兰州大学信息科学与工程学院,甘肃兰州730000

出　　处：《微计算机信息》2010年第21期47-48,19,共3页Control & Automation

摘　　要：现有的网络安全系统往往功能比较单一,难以完成网络系统的整体防护要求,难以保证业务信息的安全可靠。因此,本文提出了一种分布式防火墙、入侵保护、蜜罐等技术相互协同的防御系统框架,同时将Agent技术应用于分布式防火墙、入侵保护系统中,形成一种有效互动的安全保护体系,实现对DDoS攻击检测,极大地提高了网络整体安全性能。The current network security systems are always designed with special technology and function is one-fold.It is difficult to ensure that the network security systems could provide sufficient security for the network and service.Based on this,a cooperation defence system is built. It integrates firewall,intrusion protection,honeypot and use Agent into firewall and intrusion protection system,thus can form one kind of safe protection interaction system with effective interaction,enhance the whole safety performance enormously.

关 键 词：入侵保护 蜜罐 分布式防火墙 移动代理 协同防御 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]