Tactics executing point and linking method of it and intrusion detection system

Abstract

The invention supplies a method of interlocking between strategy execution points and invading testing system. It includes the following steps: building up interlocking connection between invading testing system and strategy executing points; keeping communication between the strategy execution points and the invading testing system; if checking invading action, the strategy execution points would response invading process result. The invention improves the safety and defending ability of the system.

Description

technical field [0001] The invention belongs to the technical field of network security, and relates to a linkage method of network security equipment, in particular to a policy execution point and its linkage method with an intrusion detection system (Intrude Detection System, IDS for short). Background technique [0002] The policy enforcement point device is used to separate the internal network and the external network, which is of great significance to the security of the network. Due to the limitations of the policy enforcement point itself, such as the coarse granularity of inspection, it is difficult to conduct in-depth analysis and inspection of many protocol details, and the policy enforcement point has the characteristics of preventing external but not internal, it is difficult to detect internal users Therefore, it is necessary for the policy enforcement point to open relevant interfaces, realize linkage with other security software, and build a secure network th...

AI Technical Summary

Problems solved by technology

This linkage method requires the support of network management. In many applications, there is no unified network management to manage policy enforcement points and IDS software.

Images