HOST-BASED SECURITY SYSTEM AND METHOD FOR PROVIDING SECURITY SERVICE

摘要

Illegal intrusion is effectively detected using identical be provided in the security system of one Intrusion Detection based on host and a kind of security department's providing method, a reliable system operation is provided by automatically restoring and enduring illegal intrusion, reduction expense automatically processes all processes after a manager establishes policy based on policy. Security agent (310-340) stores a security rule and policy and the whether illegal intrusion of monitor is generated in each host (610-640), including security agent. It includes that security agent is installed and manages security agent that one management server (200), which is connected to host by local area network,. Primary server (100) remotely is connected to management server by external network and updates security rule and include the policy in security agent by management server. The position that an invasion server of illegal intrusion is attempted in the tracking of one location track server (800) enters local area network, by being mounted to the ingress path from the local area network of external network.