基于思科路由器的IPS实现-豆柴文库

您所在位置：网站首页 / 基于思科路由器的IPS实现.docx / 文档详情

在线预览结束，喜欢就下载吧，查找使用更方便

5 金币

下载文档

/ 3

下载提示

如果您无法下载资料，请参考说明：

1、部分资料下载需要金币，请确保您的账户上有足够的金币

2、已购买过的文档，再次下载不重复扣费

3、资料包下载后请先用软件解压，在使用对应软件打开

文本预览

基于思科路由器的IPS实现
Introduction
Intoday'sworld,cybersecuritythreatshavebecomemoreinsidiousandcomplexthaninthepast.Hackersuseavarietyofmethodstopenetrateacompany'ssecurityperimeterinordertoaccessconfidentialinformationforvariouspurposes.Acompany'snetworkinfrastructureisitsfirstlineofdefenseagainsttheseattacks.Asaresult,companiesstrivetoimprovetheirnetworksecuritybyintroducingvarioussecuritytechnologies.OneofthesetechnologiesistheIntrusionPreventionSystem(IPS),whichcandetectandpreventattacksonthenetwork.ThispaperwillexaminehowIntrusionPreventionSystem(IPS)worksonCiscorouterstoenhancenetworksecurity.
OverviewofIntrusionPreventionSystem
AnIntrusionPreventionSystem(IPS)isasecuritytechnologythatprovidesreal-timedetectionandpreventionofsuspiciousnetworktraffic.IPSgoesbeyondIntrusionDetectionSystems(IDS)bynotonlydetectingintrusionsbutalsopreventingthemfrompenetratingthenetworkinfrastructure.IPStechnologyisusedtoidentifyattacksthathavealreadypenetratedthenetwork,aswellasattacksthataretryingtopenetrateit.Itcanrecognizevarioustypesofattacks,includingdistributeddenialofservice(DDoS),worms,viruses,andotherformsofmalware.IPStechnologycanbedeployedinahardware-basedorsoftware-basedsystem.
Hardware-basedIPS
Hardware-basedIPS,asthenamesuggests,isanIntrusionPreventionSystemthatisimplementedusingspecializedhardware.Thissystemusesnetworkprocessorsanddedicatedhardwaretoperformintrusiondetectionandpreventiontasks.Thesearetypicallyin-linedevices,meaningthattheysitbetweenthenetworkanditsdevices,activelyscanningnetworktrafficasitpassesthroughtheIPS.Asaresultofitshardware-basedapproach,thesystemcanofferveryhighperformanceandcanbedeployedinhigh-speednetworks.Hardware-basedIPSalsohastheadvantageofbeingmoresecuresincetheunderlyinghardwareisisolatedfromthenetwork,meaningthatattackscannotbypasstheintrusionpreventionsystem.
Software-basedIPS
Asoftware-basedsystemisamoreflexibleapproach,asitcanbeimplementedonarangeofplatforms.Thisapproachtypicallyusesaninlinesoftwareagentthatsitsonanetworkdevice,suchasar