Research And Implementation Of Active Defense System Based On Linkage

With the increasing complexity of Network environment, new ways to attack emerge in endlessly, a single security technology can not guarantee the security of enterprise networks. Security protection experienced from static protection to the development of the defense in depth and dynamic defense. Active defense not only emphasizes the intrusion identification and packet filteringfeatures, but also pays attention to the cooperation between various security components.Among them, the linkage between firewall and intrusion detection system is a hot issue for the active defense technology.Active defense system combines traditionalnetwork security and intrusion prevention mechanism, this structure can ensure the availability of the system from different perspectives.This article aims to do research on active defense technology, and establish an active defense system which is installed at the boundary of inside network and outside network to prevent the intrusion.The system has firewall, intrusion detection, dynamic response, real-time monitoring and other functions. Compared with the traditional network security defense technology, the active defense system proposed in this paper add to dynamic response and security components'collaborative work, f to achieve the purpose of active defense for the whole system. Firewalls and intrusion detection systems have a linkage through Interface communication.Firewall rule base can be modified depends on situation. We have improved the design of intrusion detection classification module, also improved the detection speed and accuracy of intrusion detection systems.