With the development of network technology, problems of network security are increasing. Not only the hosts of large networks but also desktop computers are under serious situation. The security system for desktop is an efficient means to guarantee the safety of desktop. Because of its flaws, a firewall cannot provide complete protection. Intrusion detection, an important supplement to the firewall, should combine with the firewall to build a better security system.For better performance of the security system, we firstly discuss in detail on how hackers intrude the networks and computers. Then the scheme of our desktop security system is expounded, including the function of each module and the relations among them. Following this, the three modules, desktop firewall, network-based intrusion detection and the module for packet capturing are probed into. After the comparison of the advantages and disadvantages of existing technology and the analysis of the environment of desktop, the realization method of our desktop security system is presented. |