Application Of Intrusion Response Technology In The Intranet Of Electrical Enterprise

Intrusion Detection technology is an important technology in the assurance of network security. During the course of development of network, the technology still works effectively. However, merely detection can not meet the security requirement with the variety of hackers' attacking methods, response together with control after detection of intrusions becomes important approach of restricting hackers and protecting network in time.This thesis firstly describes the basic network security technologies, such as all kinds of security schemes encountered by the network and the technologies commonly used to deal with it, secondly introduces Intrusion Detection technology, includes its definition, basic architecture and classification etc. then introduces Intrusion Response technology according to the developing prospect of the Intrusion Detection technology. Finally, aiming at the problem that the administrators met during their routine work on the network in Shenyang Electrical Management Bureau, and fully considering the network's scale and user's real demand, the thesis puts forward a security solving method which is based on security agent, combining Intrusion Detection and Intrusion Response technologies, distributed management system, designs a communicating protocol among several modules and makes it encrypted with the SSL technology which is in the domain of information security. The scheme realizes such network security technologies as remote control, Intrusion Detection, and Encryption in SSL, and not only can discover some access of exceeding or without authority real-time, but also can strengthen the network administrator's control toward the computer in the LAN, thus realizes the well combination of the two technologies, Intrusion Detection and Intrusion Response. The network security solution is worth reference to the security administration in the LAN of enterprises today.