摘要
针对现有网络安全产品报警率不高、安全系统反应能力不强的问题,提出一种基于风险意识的动态入侵防御系统模型。风险意识的引入克服了传统入侵检测系统静态规则控制下的"是/不是"判定模式的缺点。借用网管系统实现防火墙与授权端的联动,实现动态规则控制下的风险判定模式。
Now the security policy is always static, which is unsuitable for the complicated and changed network. In order to change that, Intrusion Prevention System(IPS) design based on risk-aware is put forward which makes up the defect of the pattern of "yes/no". The SNMP is used to realize the linkage of the firewall and authorization end. The network is protected in the dynamic aspect.
出处
《计算机工程》
CAS
CSCD
北大核心
2008年第21期132-135,共4页
Computer Engineering
基金
中国博士后科研基金资助项目(20060400275)
湖北省自然科学基金资助项目(2005ABA235)
关键词
风险意识
入侵防御系统
授权端
网管系统
risk-aware
Intrusion Prevention System(IPS)
authorization end
network management system