防火墙与入侵检测技术（Firewall and intrusion detection technology）.doc

防火墙与入侵检测技术（Firewall and intrusion detection technology） This article is contributed by wongBBETTY Ppt documents may experience poor browsing on the WAP side. It is recommended that you first select TXT, or download the source file to the local view. The ninth chapter is firewall and intrusion detection Synopsis This chapter introduces the contents of the two part: Firewall and intrusion detection technology. Introduce the basic concept of firewall, the common firewall type and how to implement firewall with rule set. This paper introduces the basic concept of intrusion detection system, the common methods of intrusion detection, how to write an intrusion detection tool and how to use the tool to realize intrusion detection. Firewall definition The original meaning of the firewall is the wall built between ancient houses, which can prevent fire from spreading to other houses, as shown in figure 9-1. Firewall definition The firewall mentioned here is not a wall built for fire protection, but a defense system between the local network and the external network. On the Internet, a firewall is a network security system is very effective, it can isolate the risk area (Internet or a certain risk network) and security zone (LAN) connections, and will not interfere with access to regional security risk area, wall structure as shown in Figure 9-2 control network. Secure area security workstation, server desktop, PC printer workstation, desktop PC printer The server Server Firewall Internet network Firewall function According to different needs, firewall function has a lot of difference, but generally include the following three basic functions. You can limit unauthorized users access to internal networks, filter out insecure services and illegal users, prevent intruders from approaching network defenses, restrict internal users access to special sites Because firewalls assume network boundaries and services, they are suitable for relatively independent networks, such as Intran