【作者】 卢娜；

【导师】 肖竞华；

【作者基本信息】 武汉科技大学 ， 计算机应用技术， 2008， 硕士

【摘要】 随着网络应用在全球的日益普及和网络攻击技术的不断发展,网络安全技术得到各界的广泛关注。单独使用入侵检测、防火墙技术等网络安全解决方案已经不能满足当前的需要,网络防御开始朝着全面、立体保护网络的方向发展。本文所涉及的入侵防御系统(Intrusion Prevention System, IPS)是近几年新兴的一种主动防御入侵的系统,它综合多种检测防御机制,弥补单一安全技术的不足,形成了动态的网络安全体系。本文主要研究实现了一种基于联动的网络入侵防御系统。首先,根据网络安全的现状总结了网络入侵防御系统的研究意义和发展方向,论述了与入侵防御相关的入侵检测和防火墙技术的概念及分类,讨论了各自的优缺点。同时,分析了入侵防御系统的特点、种类、方法及其面临的主要问题和发展方向。深入研究Linux防火墙实现框架和扩展技术。然后根据系统的设计原则,设计基于联动的网络入侵防御系统框架,并阐述了系统涉及的关键技术问题。接着设计和实现网络入侵防御系统的各个模块,给出模块的算法流程以及一些重要数据结构,在包过滤模块中对防火墙规则集进行优化。最后,总结本文所做的工作,针对系统存在的不足,指出需要改进和完善的方面。更多还原

【Abstract】 With the spread of network application and the continuous development of network attacktechnology, all social circles have paid close attention to the network security technology.Network prevention begins to appear more comprehensive and solid because the separatenetwork security solution can’t satisfy the need. IPS is a rising active prevention system whichintegrates multiple technologies such as intrusion and prevention technologies to make up for adeficiency of a single security technology. Therefore IPS becomes a dynamic network securitysystem.The main focuses of this thesis are the research and implementation of IPS based oninteraction. Firstly, IPS’s research significance is concluded according to the current situation ofnetwork security. Conceptions, classifications and relative merits of intrusion detection andfirewall are analyzed. IPS’s feature, classification and methods are researched, at the same timethe primary problems and future trend are discussed. Linux firewall’s framework and expendtechnology are researched. Then the framework and basic function modules of a NIDS whichbased on interaction of IDS and firewall are proposed according to the system design principles.In this part of the thesis, the key technologies are elucidated, followed by design andimplementation of each module. The main algorithm process and important data structure ofeach module are described in detail. Rule set is optimized in the packet filter module. Finally,summary is given, and according to the shortage of this NIDS, some suggestions for improvingarealsopointedout.更多还原