| 摘要 |
An intrusion prevention apparatus and method using static policy information are provided to hardware-filter or software-filter network traffic data based on an application level given to corresponding static policy information to extend the limited number of policies. An intrusion prevention apparatus using static policy information includes a storage unit(260,320), a hardware filter(310), and a software filter. The storage unit stores static policy information for hardware filtering and static policy information for software filtering to which application levels are respectively given. The hardware filter hardware-filters network traffic data by using the static policy information for hardware filtering. The software filter software-filters the hardware-filtered network traffic data by using the static policy information for software filtering. An application level assigned to the static policy information for hardware filtering belongs to H/W only, S/W packet or both.
|
