Abstract:Firewall has many shortages, such as it cannot keep away interior attacks, it cannot provide a consistent security strategy, and it has a single bottleneck spot and invalid spot, etc. Intrusion Detection System (IDS) also has many defects, such as low detection ability, lack of effective response mechanism, poor manageability, etc. If firewall and IDS are integrated, the cooperation of them can implement the network security to a great extent: on the one hand, IDS monitors the network, provides a real-time detection of attacks from the interior and exterior, and automatically informs firewall and dynamically alters the rules of firewall once an attack is found; on the other hand, firewall loads dynamic rules to hold up the intrusion, controls the data traffic of IDS and provides the security protection of IDS. Based on constructing firewall with Iptables in the environment of Linux OS, the respective characters of firewall and IDS are analyzed. Then, the viewpoint of integrating firewall and IDS to realize the network security is proposed, and the application and algorithm of intrusion detection are systemically analyzed and designed.

Research Technology of Network Packet Intercepting and Sending Based on NDIS Hook

The Network Inviting Public Bidding System and the Application of the Interceptor Technology

Application of HOOK technology in network covert communication

Design and Implementation of Network Worm Detection System for Internal Network

Research of a Multi- NIC Forwarding Technology Base on NDIS IMD

Intrusion Detection And Simulation For High-Speed Networks

Hybrid Intrusion Detection System for Complicated Network

Research of Improved Probabilistic Packet Marking Algorithms

Research on the Key Techniques of Packet Interception Based on Network Emulation

Supervision System for P2P Traffic Based on NDIS Intermediate Driver

Design and Implementation of a Defense Mechanism for SQL Injection Attack

New Trend of Intrusion Detection System for High-speed Networks

Study and Implementation of a Net-based Intrusion Detection System

Data Packet Capture and Applications Based on WinPcap

Research on Distributed Intrusion Prevention System on High-Speed Networks

Research and Implementation of High-Speed Packet Processing in Gigabit Network IPS

Research on Machine-Code Level Injection and HOOK Technique

Research And Design Of Nids Based On Linux Firewall

Study on IP Hijack

Network Monitor Technology in Windows

Design and Implementation of a Gigabit Rate Network Intrusion Prevention System