基于防火墙的分布式网络入侵检测模型设计

摘要

随着网络安全问题日趋突出,入侵检测系统作为一门新兴技术成为广泛关注的焦点,它能够及时检测入侵行为,迅速做出响应,但仍存在不能阻止攻击等缺点.因此,在分析入侵检测系统、分布式入侵检测系统的结构及防火墙技术基础上,提出了一个分布式网络入侵检测与防火墙技术集成的模型实现网络安全.%With network security becoming more and more important, intrusion detection system is a kind of novel technology and becomes the focus of network security, which can detect the action of intruding and response rapidly, but it has some weaknesses, such as preventing attack. Therefore based on the characteristics of intrusion detection system, Distributed Intrusion Detection System and the technology of firewall, the paper provides a new model of combining the firewall and distributed intrusion detection system together to protect network.