針對(duì)目前日益嚴(yán)重的網(wǎng)絡(luò)安全問題，提出了一套經(jīng)濟(jì)實(shí)用的主動(dòng)防御安全解決體系。該體系有機(jī)結(jié)合了多種安全技術(shù)，征對(duì)網(wǎng)絡(luò)的開放和復(fù)雜性，提出了一個(gè)完整的主動(dòng)防御體系模型，采用蜜罐技術(shù)提取攻擊行為特征庫，通過XML 消息傳遞機(jī)制。本文首先對(duì)網(wǎng)絡(luò)的安全和結(jié)構(gòu)進(jìn)行分析，在此基礎(chǔ)上給出了系統(tǒng)的體系模型，最后對(duì)涉及的關(guān)鍵技術(shù)做了探討。
關(guān)鍵詞：主動(dòng)防御，入侵檢測、防火墻、XML 消息傳遞
Abstract: Presently, aiming at the increasingly serious network security, the paper proposes a set of more efficient and perfect model of active defense. This model organically joins various security techniques, Toward the opening and complexity to network , has put forward an intact active defense system model, adopt the technology of the honeynet to draw the characteristic storehouse of the attack , transmit the mechanism through XML news.. Firstly, the design thought of the security prevention system is described in the paper, and based on this thought, the architecture of system is presented. Lastly, the relevant sore technology is
discussed.
Keywords: active defense, Intrusion detection, firewall, XML news transfer