摘要
为解决入侵检测系统以审计追踪为主、缺乏主动实时访问控制能力的弊病,文章提出了将入侵检测系统的检测功能与防火墙的访问控制功能相结合,使两者相互协作建立联动响应模式的方法,探讨了入侵检测与防火墙联动平台的整体框架以及实现的关键技术,给出了平台的实现步骤和流程。
In order to solve the disadvantages of Intrusion Detection System（IDS） mainly based on audit tracing, and the lack of active and real-time access control ability, this article proposes a new interactive collaboration response method, which combined both detection functions of IDS and access control functions of firewall.This paper analyzes the platform fr~/mework and key technology of realization,and presents platform realization steps and processes.
出处
《信息网络安全》
2012年第9期12-14,共3页
Netinfo Security
关键词
入侵检测系统
防火墙
审计追踪
访问控制
联动响应
intrusion detection system
firewall
audit trail
access control
interactive response
