The Research And Realization On Firewall And Network Intrusion Detection System(NIDS) Linkage

As important technological methods, firewall and intrusion detection are utilized widely .but nowadays security products often use them alternatively ,which can't meet the network security request of integer and three-D. The issue first make research on domestic and overseas development actuality and direction of firewall and intrusion detection, and then set up linkage model of firewall and intrusion detection system .The model neatly realize firewall active rules setup, overcome the bug which traditional intrusion detection can't achieve the initiative control, reach the linkage system based on the Win32 platform firewall and intrusion detection by via of codes.Firewall program utilize the functions offered by windows OS bottom ip filter dry.sys driver, expand the firewall active and static integration rule setup functions , achieve the real time filtering data pack on the firewall data link layer. Intrusion detection system use win cap developer kit technology to intercept real time data pack on the detected network data link. Detection engine mostly takes data pack models matching, which also combine the detect technology which can detect the flux abnormality and misuse .so it improves the whole system's synthesize detect ability. The communication of firewall and intrusion detection system use the server-custom communication model and security link SSL protocol, so that it guarantees the communication security of the whole system .Through the software design and code writing for the firewall and intrusion detection and linkage communication module, finally it realizes firewall and intrusion detection system linkage's network protect system based on Win32 OS system.In the end , the thesis makes a conclusion and a vista for subsequence expansion and development of system intelligentize detection system,distribution detection technology and initiative defense technology......