【作者】 李鹏； 易军凯；

【Author】 Li Peng Yi Junkai School of Information Science and Technology, Beijing University of Chemical Technology, Beijing 100029, China

【机构】 北京化工大学信息科学与技术学院；

【摘要】 基于关联的网络安全综合监控是目前信息安全技术的一个重要发展方向。在关联基础上,提出了一种多层次网络安全系统(MLNSS)的架构及其实现方式。这种架构能够有效融合不同种类安全设备的信息,分析网络安全状态,对入侵做出正确判断和决策。实践证明该技术能够处理不同种类安全设备间的协作关系,降低入侵检测系统的误警,从而更加有效地提高网络整体防御性能。更多还原

【Abstract】 It is an important developing direction of information security technology at present that integrated network security monitoring based on correlation. The paper has put forward a framework of Multi-Layer Network Security System (MLNSS) and the implementation. This framework can merge the information of different kind security devices effectively, analyze the security state of network, judge and make policy correctly against intrusion. Practice has proved that the technology can deal with the cooperation relation among different kind security devices, reduce the mistake alert rate of IDS, thus improve the online security and defend performance wholly more effectively..更多还原