Firewalls And Intrusion Detection System In Campus Network Combined Preliminary Applications

Today, the technology is developing quickly and the environment of its application is becoming more and more popular. But at the same time, the problems of security are given more and more attention by all kinds of organizations, society teams and the masses. With the development of the infomation security tenologies,all kinds of solutions appear.such as firewall.defence hacker, encryption and scanning to unsafely factors in a whole system,detection,alarm,prevention.We can take these tenologyies into two part from overview them,one is static scurity technology, and the other is dynamic scurity technology.Firewall on behalf of static security.which disadvantage is that it need people implement , maintenant and it can not follow the intrusion.However,IDS on behalf of dinamic security.which can detect the easy attack point and security hole initiatively.Futhermore, IDS can detect the dangerous action before manual detection. IDS can find the characters of dangerous intrusion and detect the attack ation and then alarm, take protected measure at the same time. Because the traditional technologies such as encryption and firewall cannot satisfy the security needs. Now intrusion detection technology, as a new security method, has been gained more and more attention.This paper brings a new thought that IDS and firewall can work together in our university network. IDS will be a good complement to firewall and firewall can find intrusion by using intrusion detection. IDS which is designed in my paper is based on misuse IDS.I produce a characteristic storeroom aim at the traditional intrusion in our network. IDS will alarm when it detect the action the same as the character. So the action must pass the thin grain of IDS after the wide grain of firewall. Therefore, we can improve greatly the security and Internet management level by using firewall to cut the intrusion,from outside Internet.