一种网络安全两级防御系统的研究与设计

摘要

传统的单一防御产品难以构建一个安全的网络防御系统，在参照一些先进的网络安全解决方案的基础上，提出了一种两级防御体系结构模型。在整个防御系统中，设计了在Linux环境下以基于网络的入侵防御系统（NIPS：Network—based Intrusion Prevention System）为第一级入侵防御系统，以主机安全代理为第二级防御系统。两系统都与管理中心保持有密切的通信机制，其中主机安全代理不仅以软件的方式运行在内部网络的各个主机中，也可以安装在远程用户的便携机和托管服务器上。%The traditional single defensive products are difficult to construct a network security defense system. This paper propose a two - stage prevention system model by consulted advanced network security solutions, taking a network - based intrusion prevention system in Linux environment as the first stage and the host security agent system as the second stage. The two stages maintain close communication with the administration center, in which host security agent system not only operate in the various mainframe network by software, but also can be installed in the laptop and server care of remote users.