防御纵深

入侵检测技术是对原有计算机网络安全机制的合理补充，它的应用极大地扩展了网络和系统安全的防御纵深。

Intrusion Detection technology is rational supplement of original computer network security system . The application of it considerably strengthens network and system security .

防御纵深必须考虑早在开发过程的设计阶段，必须在所有的技术决策不可或缺的考虑因素与网络相关。

Defense-in-depth must be considered early in the design phase of the development process , and must be an integral consideration in all technical decision-making associated with the network .

网络使用者必须采用积极的防御技术和纵深的、多样的手段来保证网络的安全。

The users of network have to adopt active defend technology and deep , various means to protect network security .

入侵检测作为一种积极的主动的动态安全措施，能够在网络安全的多层次防御和立体纵深的角度上，在网络系统受到破坏之前对外部攻击行为或内部非授权行为进行检测。

As a kind of positive initiative dynamic security measures , ID can detect the external aggression or internal unauthorized event before the network system be damaged by multi-level defence and on three-dimensional depth .

基于主动防御的思想对传统的PDRR安全模型进行了扩充，提出了一种网络主动防御安全模型和纵深防御安全策略，并在此基础上提出了一种网络主动防御体系结构。

Based on the thought of active defense , this paper proposed a network active defensive security model and a defense-in-depth security policy , and then presented a network defensive architecture .