Research Of Intrusion Prevention System Based On Technique Of Stream Filter

Intrusion prevention technology is a network security technology which actively to protect the computer system from network attack. It's a new form of security protection technique after the traditional security method, such as firewall, intrusion detection technology etc. As a supplement of the traditional security technology, it can help the system deal with network attacks and the integrality of the security infrastructure of the information can be enhanced.First, the current research of intrusion prevention is described and summarized, and several popular network security defense technologies are introduced, and the application area of each of them and their development trends is discussed.The relevant background knowledge of the stream filter technique is introduced, the primary characteristics of its implementation are summarized. A solution is presented to solve the difficult parts of the stream filter technique, and a simulation result is described in this thesis.Pattern matching algorithm is one of the core algorithms in the detection engine of the intrusion prevention system. Efficiency of the intrusion prevention system is determined by pattern matching algorithm. A survey of the pattern matching algorithm is described in this thesis. The Wu-Manber algorithm which is one of the multi-pattern matching algorithm is explained in detail, and the improvement of the the Wu-Manber algorithm is presented to improve the efficiency. Simulation results show that the efficiency of the improve Wu-Manber algorithm is better than the original one.At last, A prototype infrastructure of the intrusion prevention system is presented, which integrate some techniques such as stream filter, improved Wu-Manber algorithm, and the Linux kernel module.