Distributed Intrusion Prevention System Based On The Campus Network Research And Design,

Campus network has some characteristics such as intricate topological structure, burdensome web traffic and high defending grade. It is one of key technologies on how to defend campus network security more effectively in the condition of heavy web traffic and great bandwidth in modern computer network security research field. At present, technologies of firewall and intrusion detection are two not topics. But the firewall and Intrusion Detection System(IDS) are the systems that have shortcoming. To find a solution to the shortcoming of the firewall and Intrusion Detection System, a new technology come into being. It is Intrusion Prevention System.The firewall stops the flux that the firewall thinks bad. The flux that the firewall thinks good can pass through the firewall, so the firewall can not stop some intrusion. The IDS only detects the intrusion, but does not stop it. Before the intrusion, the IDS does not know intrusion existence. As the intrusion is coming, the IDS can stop it. Intrusion Prevention System (IDS) is a system that can provide active security protection. It detects both intrusion from external hackers and unauthorized access from internal users. The IPS is in-line, and can stop the intrusion.This paper researches the technology of the firewall and IDS, and discovers the shortcoming of them. The paper researches the technology of IPS. IPS is a more excellent system that provides security protecting for the computer network more than firewall and IDS. The paper devised an IPS for the school network and worked out the model of IPS. The paper schemes out the structure and function of the IPS.Finally, the paper draws a conclusion for this system. What's more, the future research direction is given.