基于内部网络安全的防火墙系统的改进

针对传统的边界防火墙不能防范来自内部的攻击、效率较低和故障率高、网络应用受到结构性限制等问题,提出了把分布式防火墙系统和分布式入侵检测系统结合在一起的安全防御系统.由防火墙进行访问控制,入侵检测系统检测入侵行为并反馈入侵信息,中央控制平台对各模块统一管理和配置,从而为内部网络提供了立体的、多层次的防御.

Improvement of firewall system based on internal network security

Traditional boundary firewalls often fail in preventing network from internal attack and they are low in efficiency and high defect rate.Their application in the network is limited by the constructional constraints.In order to overcome these defects,a new security system which combines the distributed firewall system and distributed intrusion detection is proposed.In the new security system,access control is performed by firewall while the intrusion detection system detects intrusion action and reflects intrusion information.And the central control unit manages all sub-modules.That new system can effectively provide the intranet with solid,multi-level protection.