期刊文献+

基于风险意识的动态入侵防御系统模型 被引量:1

Dynamic Intrusion Prevention System Model Based on Risk-aware
下载PDF
导出
摘要 针对现有网络安全产品报警率不高、安全系统反应能力不强的问题,提出一种基于风险意识的动态入侵防御系统模型。风险意识的引入克服了传统入侵检测系统静态规则控制下的"是/不是"判定模式的缺点。借用网管系统实现防火墙与授权端的联动,实现动态规则控制下的风险判定模式。 Now the security policy is always static, which is unsuitable for the complicated and changed network. In order to change that, Intrusion Prevention System(IPS) design based on risk-aware is put forward which makes up the defect of the pattern of "yes/no". The SNMP is used to realize the linkage of the firewall and authorization end. The network is protected in the dynamic aspect.
出处 《计算机工程》 CAS CSCD 北大核心 2008年第21期132-135,共4页 Computer Engineering
基金 中国博士后科研基金资助项目(20060400275) 湖北省自然科学基金资助项目(2005ABA235)
关键词 风险意识 入侵防御系统 授权端 网管系统 risk-aware Intrusion Prevention System(IPS) authorization end network management system
  • 相关文献

参考文献6

二级参考文献16

  • 1高光勇,迟乐军,王艳春.联动防火墙的主机入侵检测系统的研究[J].微计算机信息,2005,21(07X):66-68. 被引量:23
  • 2欧阳凯,周敬利,夏涛,余胜生.基于虚拟服务的SSL VPN研究[J].小型微型计算机系统,2006,27(2):228-232. 被引量:15
  • 3[1]Park K, Lee H. A Proactive Approach to Distributed DoS Attack Prevention using Route-Based Packet Filtering. http//www. ietf, org 2000-12 被引量:1
  • 4[2]Park K, Lee H. On the Effectiveness of Route-Based Packet Filtering for Distributed DoS Attack Prevention in Power-Law lnternets.SIGCOMM, 2001 被引量:1
  • 5[3]RFC 2827, Network Ingress Filtering: Defeating Denial of Service Attacks which employ IP Source Address Spoofing. 2000-05 被引量:1
  • 6[4]Internet Draft. Distributed Denial of Service Incident Handling: RealTime Inter-Network Defense. 2002-05 被引量:1
  • 7Yao-Min Chen,Yanyan Yang.Policy Management for Network-based Intrusion Detection and Prevention[J].Network Operation and Ma-nagement Symposium,2004,(2):219-232. 被引量:1
  • 8L P Gaspary,L F Balbinot,L R Tarouco.Monitoring High-Layer Protocol Behavior Using the Trace Architecture[J].Network Operation and Management Symposium,2001,(1):99-110. 被引量:1
  • 9Definitions of Management Objects for the Delegation of Management Scripts[S].RFC3165,IETF,2001. 被引量:1
  • 10BrianCaswell JayBeale etal 宋敬松.Snort 2.0 Intrusion Detection [M].北京:国防工业出版社,2004.. 被引量:3

共引文献31

同被引文献2

引证文献1

相关作者

内容加载中请稍等...

相关机构

内容加载中请稍等...

相关主题

内容加载中请稍等...

浏览历史

内容加载中请稍等...
;
使用帮助 返回顶部