Firewall And Ids Correlation Mechanism Study

With the rapid development of the Internet, computer network has propagated to every field of our daily lives. On the other hand, the interconnecting and distributing increased the vulnerability of network, which causes the network security a focus of study. The security technologies, such as firewall, intrusion detection and data encryption have been developed to prevent unauthorized user from stealing, faking and destroying data. The firewall and intrusion detection are two of the well-known approaches to network security. As the gateway between private network and public network, the firewall can provide extensively effective protection. But there is also a limitation because of the inflexible criterion which comes from the static defense provided by firewalls. As for the intrusion detection, it can detect intrusions but can not prevent them. So it can be used to supplement firewalls as the second barrier though it can not replace firewalls completely. Considering the complexity of network security and the difficulty of managing firewalls and intrusion detection systems respectively, it becomes the general consensus to combine firewall and intrusion detection system closely.The emphasis of this dissertation is put on the research of the combination of firewall and intrusion detection technology. A system model which combines firewall and intrusion detection system is presented with the module design of key combination components. The model adopts IAP made by the IDWG and information data model based on XML to achieve openness, generality and compatibility.At the end of this dissertation, a summary is provided and also a prospect to the future work.