Discussion on the traditional network security technology

Today, merchants, banks and other business and financial institutions in the E-commerce boom has entered the internet, the government on the Internet as the symbol of the digital government to connect the State organs with the Internet, through the Internet to achieve including individuals, enterprises and the government's social information sharing has gradually become a reality. With the continuous expansion of the network application scope, the attacks and the destruction to the network are increasing day by day. Whether the government, business, or finance, the media sites have been invaded and destroyed to varying degrees. Network security has become an important part of state and national defense security, but also the key to the development of national network economy. Statistics: Information thieves have grown at 250% speed over the past 5 years, and 99% of large companies have had big intrusions. World famous commercial websites, such as Yahoo, Buy, EBay, Amazon, CNN have all been hacked, causing huge economic losses. Even the RSA website, which specializes in network security, has been attacked by hackers.

Firewall

The purpose of the firewall is to establish a security control point between the internal and external two networks, and to allow, deny or redirect the data flow through the firewall to achieve the audit and control of the service and access to and from the internal network.

Intrusion Detection System

Help the system deal with network attacks, extend the security management capabilities of the system administrator (including security audits, monitoring, attack identification and response), and improve the integrity of the information security infrastructure. It collects information from a number of key points in the computer network system and analyzes the information to see if there are any violations of security policies and signs of attack.

Lack of traditional technology

It is obvious that the traditional technology has not been able to withstand today's diverse attacks, intrusions. Firewalls are too inflexible, some product customization rules are not flexible, management is very troublesome, and intrusion detection system is affected by its congenital defects, only passive monitoring, and the intrusion event powerless, some products performance is not high, the application in the network of large traffic speed slow, and even itself become the target of attack, eventually collapse.