IPv6网络安全设备技术要求 第3部分:入侵防御系统(IPS) Technical requirement for IPv6 network security equipment— Part 3:Instrusion prevention system(IPS)  ICS  33.040.40 CCS  M 32   中华人民共和国国家标准 GB/T 44810.3—2024 2024-10-2 6发布 2025-02-0 1实施     国家市场监督管理总局 国家标准化管理委员会 发 布目　　次 前言   ·····································································································   Ⅲ 引言   ·····································································································   Ⅳ 1     范围   ··································································································   1 2     规范性引用文件   ······················································································   1 3     术语和定义   ···························································································   1 4     缩略语   ································································································   1 5     功能性要求   ···························································································   2      5.1     数据监测   ·························································································   2      　5.1.1　数据收集5.1.1   ···············································································   2      　5.1.2　协议分析   ····················································································   2      　5.1.3　行为监测   ····················································································   2      　5.1.4　流量监测   ····················································································   2      　5.1.5　流量过滤   ····················································································   2      5.2     入侵分析   ·························································································   2      　5.2.1　数据分析   ····················································································   2      　5.2.2　入侵取证   ····················································································   2      　5.2.3　攻击防护   ····················································································   2      　　5.2.3.1　拒绝服务攻击防护   ······································································   2      　　5.2.3.2　漏洞攻击防护   ···········································································   3      　　5.2.3.3　Web攻击防护   ··········································································   3      　　5.2.3.4　僵木蠕攻击防护   ········································································   3      　　5.2.3.5　自动化攻击威胁防护   ····································································   3      　　5.2.3.6　攻击逃逸防护   ···········································································   4      　　5.2.3.7　外部系统协同防护   ······································································   4      　　5.2.3.8　威胁情报库   ·············································································   4      5.3     入侵响应   ·························································································   4      5.4     管理控制   ·························································································   4      5.5     检测结果处理   ····················································································   4      5.6     安全策略   ·························································································   4      5.7     异常应急处置   ····················································································   4 6     性能要求   ······························································································   4      6.1     网络层吞吐量   ····················································································   4      6.2     混合应用层吞吐量   ···············································································   4      6.3     TCP新建连接速率   ··············································································   4 GB/T 44810.3—2024     Ⅰ      6.4     TCP并发连接数   ··