| 摘要 |
A design of an IPv4/IPv6 mixed IPS(Intrusion Prevention System) is provided to be performed on the basis of an IPv6 network applicable to a network where an IPv4 network and the IPv6 network are mixed together, thereby previously formulating a basis for construction and the advance of a future information communications environment. A sensor captures a packet when the packet flows through a network. Through the sensor, the packet is obtained from an LAN(Local Area Network) card. System management processes the obtained packet, and performs a rule matching process, then copes with the rule matching. The system management consists of an audit/archive unit, a knowledge unit, a processing engine unit, and an alarm unit. The audit/archive unit collects received packet information. The knowledge unit stores a rule. A processing engine has information on processing order of the packet. |
