本文综合了IDS与IPS的特点，将协议分析、网络流量分析与深度包检测技术相结合，提出一个新的网络防御系统一“基于协议分析的网络分布式入侵防御系统(Network Distributed Intrusion Prevention System Base on the Protocol

Analysis，NDIPS)，同时给出了系统的基本实现，并利用现有仿真条件及网络基

础对部分检测防御技术进行了必要的评测与验证。该系统提高了网络对入侵的实

时阻止能力，提高了网络整体的安全性。-This combination of IDS and IPS features, the protocol analysis, network traffic analysis and deep packet inspection technology, to propose a new network defense system a " protocol analysis of network-based distributed intrusion prevention system (Network Distributed Intrusion Prevention System Base on the Protocol Analysis, NDIPS), also gives a basic implementation of the system and the simulation conditions and the use of existing network infrastructure technology for detection and prevention on the part of the necessary evaluation and verification. The system is to improve the network in real time to prevent the invasion ability of and improve overall network security.