入侵防御系统(IPS)的技术研究及其实现

• 作 者: 卿昊 袁宏春
• 机 构: 电子科技大学计算机学院,电子科技大学计算机学院 成都 610054,成都 610054
• 出 处: 通信技术
• 发表日期: 2003年06期
• 关键词: 网络安全 入侵检测 入侵防御系统

入侵防御系统是网络安全领域为弥补防火墙及入侵检测系统(Intrusion Detection System)的不足而新发展起来的一种计算机信息安全技术。不同的入侵防御系统实现的方式各不一样,但其共同点是综合了防火墙防御功能和入侵检测系统的网络数据包检测功能,紧密实现了上述两安全系统的互动互利,对受保护网络进行更为完善的保护。论述了入侵防御系统的两种体系结构,并对其中的关键技术作了介绍。在最后提出了一个入侵防御原型系统的实现方式以供探讨。

Intrusion prevention system is a kind of computer information security technology newly developed in the field of network security to make up for firewall and intrusion detection system. Different intrusion prevention systems are implemented in different ways, but their common denominator is to combine the functions of firewall defense and intrusion detection system to detect network packets. The two security systems are closely interoperable and mutually beneficial, and the protected networks are more For perfect protection. Discussed the two kinds of architecture of intrusion prevention system, and introduced some key technologies. At the end of the article put forward an intrusion prevention prototype system for discussion.