一种网络入侵预防系统NIPS的设计

入侵预防系统是近两年新兴起的一种网络安全技术。它比防火墙和入侵检测系统具有更高的主动性,具备一定程度的智能性,能够保护计算机网络系统免受未知类型的攻击。本文介绍了一种NIPS系统的设计与实现。本系统主要考虑了两大基础检测技术的实现:深度内容搜索技术和行为分析技术,这两项技术实现了IPS的基础同时也是主体的检测功能,其它检测技术的实现大多要建立在这两项技术基础之上。

Design of a Network-based Instruction Prevention System

Intrusion prevention system (IPS) is a new network safety technology developed in recent years. IPS is more intelligent andactive than firewall and intrusion detection system (IDS), and can protect computer and network from unknown attack. A basic network-based intrusion prevention system was introduced in this article. The design of NIPS focuses on two basic detection technologies: deep content search and behavior analysis. These two technologies implement basic and main detection function of IPS; otherdetection technologies are based on these two ones.