Intrusion Prevention System Of Campus Network

With the increasing invasion affairs and the improved attack levels, on the one hand, network infection, virus and intrusion attacks accelerate, on the other hand the response to network attacks are increasingly lagging behind the time. To resolve this contradiction, the traditional firewall or invasion detection technology can't meet our requirement. For the new attack methods often can not be correctly identified by these passive defense technologies, and thus lapse into a passive position。To find a solution to the shortcoming of the firewall and Intrusion Detection System (IDS), a new technology comes into being. It is Intrusion Prevention System (IPS). IPS is a new network safety technology developed in recent years, it is more intelligent and active than firewall and IDS,and can protect computer and network from unknown attack。In this thesis, we first do a thorough investigation upon the current status of the campus network security, then research the technology of the firewall and IDS, discover the shortcoming of them and analyses the weakness from performance and dependability of method that uses the interaction model to defend against the network attack, which combines the IDS and Firewall for defending issues. Analyze the operation principle, classification, key questions and trend of IPS. In this thesis, we devised an IPS for the college network and schemes out the structure and function of the IPS.Finally, a summary is given and the future research directions are also pointed out.