网络安全主动防御研究综述  

Review of Research on Active Defence for Network Security

作　　者：杨宇 陈一丁 赵荣 陈明媚[3] 闫钰 YANG Yu;CHEN Yi-ding;ZHAO Rong;CHEN Ming-mei;YAN Yu(College of Information,Engineering University of People Armed Police,Xi'an 710086,China;College of Graduate Brigade,Engineering University of People Armed Police,Xi'an 710086,China;College of Ministry of Basic Education,Engineering University of People Armed Police,Xi'an 710086,China)

机构地区：[1]武警工程大学信息工程学院,西安710086 [2]武警工程大学研究生大队,西安710086 [3]武警工程大学基础部,西安710086

出　　处：《科学技术与工程》2025年第7期2654-2663,共10页Science Technology and Engineering

基　　金：全军军事理论项目;大学基础创新研究项目(WJY202306)。

摘　　要：随着现代网络信息技术的不断发展,作为传统被动的网络安全防御手段已经无法有效应对不断变化的新型网络威胁,不能满足当前网络安全的需求。作为现如今主要网络防御手段,主动防御克服传统防御的诸多缺陷,能够有效应对未知网络活动,展现出很强的优势。从主动防御的发展过程出发,对网络安全主动防御目前存在的主要技术进行了梳理,总结分析了网络安全入侵防护、网络安全入侵检测、网络安全入侵预测、网络安全入侵响应4个层面的主要技术优缺点,并对其未来发展方向进行了分析与展望。With the continuous development of modern network information technology,the traditional passive network security defences are static defences that can not effectively respond to new types of network threats and can no longer meet the needs of network security.As the main network defence mean,active defence overcomes the many defects of traditional defence,can effectively respond to unknown network activities,showing strong advantages.Starting from the development process of active defense,the main technologies currently existing in network security active defense were sorted out,and the advantages and disadvantages of the main technologies at four levels,namely,network security intrusion defence,network security intrusion detection,network security intrusion prediction,and network security intrusion response,were summarised and analyzed,as well as the analysis and outlook of its future development direction.

关 键 词：网络安全主动防御 入侵防护 入侵检测 入侵预测 入侵响应 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]