Firewall system embedded with intrusion detection function

Abstract

The invention discloses a firewall system embedded with an intrusion detection function. The system comprises a hardware firewall and a software protection module, wherein the hardware firewall is used for being connected with an upper computer and accessing a protection network. The system also comprises a protective shell and a core control module, wherein the core control module is fixedly installed in the protective shell, and comprises a main control chip and a peripheral circuit; the data end of the main control chip is connected with a data storage unit, the main control chip is also connected with a human-computer interaction module, and a power pin is connected with a weak-current power supply unit; the software protection module is arranged in the main control chip, and comprises a data packet processing unit and an intrusion detection unit; and the input end of the data packet processing unit is connected with a network access unit, while the output end is connected with the intrusion detection unit that is also connected with a real-time alarm unit. According to the system provided by the invention, an intrusion detection function is implanted into the common firewall via combination of hardware and software, and thus security protection performance is improved.

Description

technical field [0001] The invention relates to the technical field of firewalls, in particular to a firewall system with an embedded intrusion detection function. Background technique [0002] While benefiting from the huge new opportunities brought by the information revolution, people have to face the severe test of information security issues. With the advancement of network technology, the battle of network attack and defense has become more and more intense. Network security has attracted great attention from various countries, departments, and all walks of life, and it has become public knowledge to introduce security prevention mechanisms into the network. To prevent network attacks, the most common countermeasure is to build a firewall. A firewall is an application layer gateway that filters packets entering the network according to set rules, and can also provide corresponding security services for various network applications. Using firewall technology, after c...

AI Technical Summary

Problems solved by technology

But it is far from enough to use a firewall to ensure network security, because intruders will try to find possible open channels behind the firewall

On the other hand, firewalls do little to stop internal attacks, etc., and are useless for disgruntled and highly skilled employees inside the enterprise

Moreover, due to performance limitations, firewalls usually cannot provide effective intrusion detection capabilities

Images