A Network Security Strategy for Campus Network

With the increase of attackers' knowledge and all kinds of attack tools and methods,network security becomes a more and more important issue.Simple firewall strategy is insufficient for network security requirement.In order to further enhance network security,firewall technology and intrusion detection system must be used together.On the other hand,campus network's service platform is based on open source code software generally,so this paper presents a network security strategy to enhance campus network security,which is founded on integration of IPtables-based packet filter firewall,SquidSocks-based proxy server and network intrusion detection system Snort on Linux OS.Finally,the method of implementing this strategy and the related key technique are discussed in detail on campus network environment.