论文部分内容阅读
随着Internet的迅猛发展,网络攻击的方法和技术越来越智能化和多样化,网络安全需求与日俱增。传统的防火墙(Firewall)与入侵检测系统IDS已不能满足网络安全整体化需求。鉴于此,引入ACE网络通信中间件和SSL协议,采用开放接口方式,从网络安全整体性与动态性的需求考虑,设计了一种新型的基于ACE和SSL通信平台的Firewall和IDS协同联动系统模型。该系统模型融合了Firewall和IDS的优点,采用加密信息传输机制、策略管理机制和联动分析算法,确保了传输信息的可靠性、完整性和机密性。实验结果表明,该联动系统不但能够有效地检测和防御攻击,而且具有良好的协作性、通用性和可扩展性。
With the rapid development of the Internet, the methods and technologies for network attacks are becoming more and more intelligent and diversified, and the demand for network security is increasing day by day. The traditional firewall and intrusion detection system IDS can not meet the requirements of network security integration. In view of this, the introduction of ACE network communication middleware and SSL protocol, using an open interface approach, from the network security integrity and dynamic demand, designed a new ACE and SSL communication platform based on Firewall and IDS collaborative linkage system model . The system model combines the advantages of Firewall and IDS, and uses the encryption information transmission mechanism, policy management mechanism and linkage analysis algorithm to ensure the reliability, integrity and confidentiality of transmitted information. The experimental results show that the linkage system not only can effectively detect and defend against attacks, but also has good cooperation, versatility and scalability.