Research On Security Defense System Of The Intelligent Wireless Security Gateway

With the development of wireless network, wireless network is widely used and brings great convenience to people's life. But the coming problem is its security. The opening transmission channel makes that there is no clear border in wireless network, and the intruder can get the information of wireless network and intrude it without physical connection. It is a great threat to the internal resources. The security of the wireless network has become a major issue of the industry.According to the application of firewall and intrusion detection system in wired network, we supply a security defense system integrated with IDS and firewall modules. With the corresponding secure interaction policy, it can interact the IDS module with the firewall. The security defense system can monitor the dataflow of the internal wireless network and external wired network, filter and control dangerous data and user, and realize the combination of active defense and passive defense. The security defense system improves the real time response capacity of the firewall, strengthens the interdiction function of IDS and realizes the whole defense of the network.This paper contains four major parts. Firstly, it introduces the background and the purpose of this thesis, analyzes the main security mechanism and the common hidden trouble in wireless network. Secondly, we discuss the intelligent wireless security gateway and the status and role of the security defense system. Thirdly, IDS module and firewall module are detailed illuminated. IDS module mainly introduces the description of the intrusion character, generation process of the rule chains and the realization of the intrusion detection. Firewall module mainly analyzes the firewall mechanism under Linux and describes the realization. Finally, we detailed describe the data switch format, frame and flow of the interaction module, and give a whole project.The security defense system is implemented at present. We are now on further studies and improvements in order to interact with other security equipments.