SECUROUTER - A NOVEL DYNAMIC FIREWALL SYSTEM EMBEDDED WITH IDS INTEGRATION

摘要：

As the traditional firewalls filter only the known types of attacks through blocking the packets sent from/to designated IP addresses or ports, only static and very limited protection are provided.A security framework with a double-homed host (SecuRouter) at its core, which is a firewall that could dynamically modify its rule set from the notification messages sent by the legitimate intrusion detection agents running in the protected LAN, is presented in the paper.Through providing a uniform interface with these algorithm-independent intrusion detection modules, the approach shows a better adaptability and extensibility.Provided along with the framework is a packet logging mechanism, with which help further off-line analysis of the network traffic can be easily implemented.

关键词： Firewall SecuRouter Intrusion Detection Double-Homed Host

作者: JIN SHU DAI HONG-BIN ZHU CHAO

作者单位: SAC Rail-Transit Engineering Co.,LTD Nanjing SAC Rail-Transit Engineering Co.,LTD

会议类型: 国际会议

会议名称: 2011 3rd International Conference on Computer Technology and Development(2011第三届计算机技术与发展国际会议 ICCTD2011)

会议地点: 成都

会议语种:英文

页码: 2359-2363

在线出版日期: 2011-11-25（万方平台首次上网日期，不代表论文的发表时间）