| 基于IPv6的入侵检测与防火墙联动系统 |
| |
| 引用本文： | 孙勇,张恒,马严,温向明. 基于IPv6的入侵检测与防火墙联动系统[J]. 计算机工程, 2008, 34(11): 152-154 |
| |
| 作者姓名： | 孙勇 张恒 马严 温向明 |
| |
| 作者单位： | 1. 北京邮电大学通信网络综合技术研究所,北京,100876
2. 北京邮电大学信息网络中心,北京,100876 |
| |
| 基金项目： | 北京市教委学科建设与研究生教育基金 |
| |
| 摘 要： | 网络安全中入侵检测与防火墙的联动是研究的热点，目前已经实现的联动系统多局限于IPv4网络，该文基于IPv6网络的防火墙和入侵检测系统，提出一种分布式的网络安全防护体系，通过设置入侵检测代理和集中控制服务器，分析检测到的入侵状况信息后主动调整防火墙的规则策略，实现支持IPv6/IPv4双协议的入侵检测与防火墙动态联动。测试结果表明，系统有效可靠。
|
| 关 键 词： | IPv6协议 入侵检测 防火墙 联动 |
| 文章编号： | 1000-3428(2008)11-0152-03 |
| 修稿时间： | 2007-06-19 |
IPv6-based Interaction System with Intrusion Detection and Firewall |
| |
| SUN Yong,ZHANG Heng,MA Yan,WEN Xiang-ming. IPv6-based Interaction System with Intrusion Detection and Firewall[J]. Computer Engineering, 2008, 34(11): 152-154 |
| |
| Authors: | SUN Yong ZHANG Heng MA Yan WEN Xiang-ming |
| |
| Affiliation: | (1. Institute of Communication Networks Integrated Technique, Beijing University of Posts and Telecommunications, Beijing 100876; 2. Information Network Center, Beijing University of Posts and Telecommunications, Beijing 100876) |
| |
| Abstract: | The interaction of intrusion detection and firewall is hot in the research of network security. Almost all of the realized system limit to IPv4 networks. This paper presents an IPv6-based distributed network security prevention system which is combined with firewall and intrusion detection system. By implementing intrusion detection agent and concentrated control server, system obtains the intrusion message and analyses it, and adjusts the rules and policies of firewall initiatively. It realizes the interaction of intrusion detection and firewall based on IPv6/IPv4. The test results show that the system is effective and dependable. |
| |
| Keywords: | IPv6 intrusion detection firewall interaction |
| 本文献已被 CNKI 维普 万方数据 等数据库收录！ |
| 点击此处可从《计算机工程》浏览原始摘要信息 |
|
点击此处可从《计算机工程》下载全文 |
