A Policy-based Intrusion Prevention System
基于策略的入侵防御系统模型的研究

Firewall and Intrusion Detection System can enforce security of the network effectively, but there are also drawbacks existing in themselves. To enhance the security of the network furthermore, integrating isolation function of the firewall and IDS while avoiding their limitations is a good idea. The policy-based intrusion prevention system, which integrating security management into network management system and realizing functions of firewalls and IDS through NMS, is an entirely new and effective security protection technology.