針對目前日益嚴重的網絡安全問題，提出了一套經濟實用的主動防御安全解決體系。該體系有機結合了多種安全技術，征對網絡的開放和復雜性，提出了一個完整的主動防御體系模型，采用蜜罐技術提取攻擊行為特征庫，通過XML 消息傳遞機制。本文首先對網絡的安全和結構進行分析，在此基礎上給出了系統的體系模型，最后對涉及的關鍵技術做了探討。
關鍵詞：主動防御，入侵檢測、防火墻、XML 消息傳遞
Abstract: Presently, aiming at the increasingly serious network security, the paper proposes a set of more efficient and perfect model of active defense. This model organically joins various security techniques, Toward the opening and complexity to network , has put forward an intact active defense system model, adopt the technology of the honeynet to draw the characteristic storehouse of the attack , transmit the mechanism through XML news.. Firstly, the design thought of the security prevention system is described in the paper, and based on this thought, the architecture of system is presented. Lastly, the relevant sore technology is
discussed.
Keywords: active defense, Intrusion detection, firewall, XML news transfer