Study On Key Problem In Extensible Intrusion Prevention-depth System

Intrusion prevention system(IPS) is fresh info-security technology to make up for the inabilities of firewall and intrusion detection system(IDS). Intrusion prevention system as a kind of new initiative defense technology, with it's upstanding protection function had been adverted, and it is a important technology and means being beneficial to actualize network security stage by stage, and plays an important role in various situations.This paper firstly summarizes the state of the current network security, analyses and researches the IDS and IPS technology. We designed a extensible Intrusion Prevention-depth System that Based on the researching on IDS. Then researched on the mainly technology.The main content of this paper is:①Designing a extensible Intrusion Prevention-depth System model, and analyzing every part's function of the model based on the researching on protocol analysis technology and extensible system structure. And bringed up the mainly key technology to achieve the model.②For the purpose of improving performance and analyzing data depending on the service that supported, designed the depth protocol analyzing model, whose mainly tasks are analyzing the network layer and transportation layer's protocol, and make sure the application layer protocol.③Designed a framework which support extensible application analyzers and protocol analysis basing on state transition technology, and designed a part of application analyzers.④Focusing on timer dispatch algorithm's performance, designed an application Memory manager program , which improve the performace of priority queue.