论文部分内容阅读
IPS承载期望2003年,IPS成为一种新的技术出现,计划取代IDS。当时虽然在防火墙和IDS,但是攻击者有很多手段会绕过防火墙,而IDS也经常会发生漏报和误报的情况。所以把防火墙和IDS两种技术结合起来,就产生了IPS。IPS起到的作用是更主动地进行安全防护。从技术的同源性上来看,IPS和IIDS之间有着千丝万缕的必然联系,IPS可以被视作是增加了主动阻断功能的IDS。但是,IPS绝不仅仅是增加了主动阻断的功能,而是在性能和数据包的分析能力方面都比IDS有了质的提升。由于增加了主动阻断能力,检测准确程度的高
IPS bearer expectations In 2003, IPS became a new technology, plans to replace IDS. At that time, although the firewall and IDS, but attackers have many means to bypass the firewall, and IDS often omissions and false positives. Therefore, the combination of firewall and IDS technology, it generated IPS. The role of IPS is to take the initiative to carry out security. From the technical homology point of view, there are inextricably linked between IPS and IIDS, IPS can be seen as an increase of active blocking IDS. However, IPS does more than simply increase its ability to actively block, but rather improves IDS over performance and packet analysis capabilities. Due to increased active blocking ability, the detection accuracy is high