Distributed Active Defense System

As we know, network security becomes a big problem to the further development of network. To ensure the development of network, the thesis promotes a distributed proactive defense system. Compared with the passive defense technologies and the current proactive defense technologies, it is a new defense technology. Its value lies in protecting many networks being in different regions effectively, and defending distributed attacks, and resolving the problem of protecting network with large traffic, and providing convenience for users to manage system.First, this thesis analyses the disadvantages of current proactive technologies and the demands of users. As the result, it promotes the idea of distributed proactive defense system, which integrates the distributed system technologies. Based on the analysis above, this article designs the system architecture, which includes three parts: control center, data center and monitor center. According to the actual demands, the system can have lots of instances of each part, which enhance the stability and expansibility of the system. Second, this article designs the system top-down, and divides system into many modules, which include communication module, task pool module, memory pool module, information service module and rights management module, etc. It also explains the key processes.Based on the detailed designs, this thesis implements the key modules and explains the technical proposals. With the help of cooperation of different modules, the system implements high layer functions, such as remote procedure call, communications among monitor centers, and self-learning.Proactive defense technology is in the process of further development, and it stands for the direction of network security development. So, this thesis promotes the distributed proactive defense system. It will promote network security development and provide a new way for security research.