Intrusion Detection System And Firewall Interactive Applications In Education Network Research

The education intracity networks built, strengthening the area with school online school exchanges and cooperation for education informatization, provides ways and safeguard, also as a part of Internet security problems, education network can not be ignored. Generally speaking, a little bit a little bit more mature already had the education network firewall, proxy servers and other network security measures, but the current school most safety equipment are classified as a static security technology category, such as firewalls. After the network administrator proper configuration firewall may request an unexpected visit to outside, through it to shield the rational flow of the invasion of containing malicious code had no way of checking out, also cannot access network data analysis, especially to network internal events of completely helpless. Unable to meet demand in the network firewall this background, intrusion detection system came into being. Intrusion detection systems to dynamic security technology, it can active detection network vulnerable to security vulnerabilities, and anlysing and prior to artificially detected to risk behavior. In advanced safety testing field, firewall called the first gate, and intrusion detection system is become is the second word security gate, it is active safety protection technology outstanding delegates from network security, three-dimensional depth, multi-level defence Angle, to prevent incorrect operation malicious attacks and the network provides real-time protection initiative in network system, thus able to intercept and response before harm invasion.Based on the above reasons, in carefully compared to the firewall, as a representative of the static safety technology and intrusion detection technology, as a representative of the dynamic security technology their differences and contact, through exploring their merits, puts forward a scheme of combination of application, thus make both can complement each other, play to their respective advantages, compensate for their shortcomings, combining education network construction and management, greatly improving the system safety level.The advantages of this model is a firewall, a former blocked network in most of the invasion, to a certain extent, reduce the network traffic to intrusion detection system of the burden of intrusion detection system, it is to provide real-time detection, firewall for firewall Settings is no longer as usual need network administrator Settings, but according to intrusion detection system provide information, make their own corresponding Settings. Also, because both the corridor is communication, if confidentiality is bad, will bring new defect to the network, and at the same time, they will occupy the communication between the parts of the network resources, but also for network burden.