摘要
为提高内部网络的安全性,通常同时采用防火墙和入侵检测系统(IDS),但是两者都有无法克服的缺点。防火墙是整个内部网络的门户,为了不影响网络的吞吐量,不宜采用深入的检测;而IDS在防火墙后运行,可以深入检测,但是一旦发现入侵,能采取的措施却极为有限,最多只能断开连接,对于后续的相同的攻击无能为力。因此应该建立一种机制,让IDS发现的入侵规则及时通知防火墙,阻断同样类型的攻击,如果把两者整合到一起,将发挥更大的优势。
Firewall and Intrusion Detection System(IDS) are the most common and necessary utility in network security.Each has special weakpoint that can′t be removed,the firewall can not detect data packet much more throughly,while it′s the gate of whole intranet.On the contrary ,IDS can detect much carefully,but IDS has not much means to do with next just the same kind of Instrusion.If they give help each other,they will give more powerful function.
出处
《青岛大学学报（工程技术版）》
CAS
2003年第2期61-64,共4页
Journal of Qingdao University(Engineering & Technology Edition)
