Method of linking network equipment and invading detection system

Abstract

A method for coupling network device with intrusion detection system includes detecting network device port by intrusion system for obtaining data stream control data including character data of doubtful data stream and its corresponding block time, sending said control data to network device , setting up corresponding access control list according to received data stream control data by network device to block data stream .

Description

technical field [0001] The invention relates to the technical field of network security, in particular to a method for linkage between network equipment and an intrusion detection system. Background technique [0002] When more and more companies transfer their core business to the Internet, network security appears to people as an unavoidable problem. Traditionally, companies generally use firewalls as the first line of defense for security. As the knowledge of attackers becomes more mature, and the attack tools and methods become more complex and diverse, a simple firewall strategy can no longer meet the needs of departments that are highly sensitive to security. Network defense must adopt a deep and diverse means. Intrusion detection technology is a network security technology that actively protects itself from attacks. As a reasonable supplement to the firewall, intrusion detection technology can help the system deal with network attacks, expand the security management...

AI Technical Summary

Problems solved by technology

[0006] This linkage method of prohibiting the abnormal data flow of a certain port can ensure the security of the network to a certain extent, but it will also affect the normal use of other users under the port.

Images