内网安全联动防护技术的研究与实现

随着网络应用的迅速发展，更多的攻击来自于企业内部，使得传统的基于网关的安全架构在新一代的攻击手段面前显得非常脆弱。而传统的这些安全防护手段属于被动式，只能简单过滤或丢弃攻击数据，而无法在攻击源发起攻击之前或之后的较短时间内即时响应，将内部网络中可疑的攻击源主机断开，使其无法通过内网连接进行攻击。针对这种情况，提出了将入侵检测设备、主机安全应用程序与路由交换设备的全面联动的一种全新的主动式安全联动防护思路和方案，从而彻底在源头对攻击进行了抑制。这种联动机制，整合了原有的网络安全技术，实现了1加1远大于2的安全防护效果。

Investigation and Implementation of Combined Security Technology for Intranet

Along with network application rapid development, more and more threat is from inside intraned, this new type of threat will by pass traditional security protection system(like firewall/VPN gateway) and will be launched from broadband intranet. The traditional security solution is passive and can only filter or block the attacking packet, it can not identify and block the source attacking host from the beginning or just a while from the beginning of the attack. The text analyse the security threat within the intranet, and suggest a new proactive security solution which based on combined operation between security application and switch router.