【摘要】 基于网络的入侵检测系统(Network-BasedIntrusionDetectionSystem,IDS)存在着策略维护困难、防止攻击能力差、攻击响应不及时等局限性。网络入侵防御系统(IntrusionPreventionSystem,IPS)采用串联工作方式,能有效地防御网络攻击,抑制网络蠕虫病毒的传播,最终对关键网段的保护起重要作用。更多还原

【Abstract】 It’s difficult to maintain the security policy of the network-based intrusion detection system (NIDS). Neither can the NIDS prevent the intrusion effectively nor in time. In contrast, intrusion prevention system (IPS), working as an in-line appliance, not only can detect the intrusion and virus, but also prevent them effectively. Thus, IPS takes an important role when guarding the critical network segment.更多还原