針對(duì)單一的網(wǎng)絡(luò)安全技術(shù)已經(jīng)無(wú)法很好的解決日益復(fù)雜的網(wǎng)絡(luò)安全問(wèn)題，提出了一種新型的安全系統(tǒng)。該系統(tǒng)基于分布式防火墻環(huán)境，結(jié)合分布式入侵檢測(cè)技術(shù)，并利用專家系統(tǒng)使兩者協(xié)同工作，實(shí)時(shí)檢測(cè)并響應(yīng)動(dòng)態(tài)的網(wǎng)絡(luò)安全事件，彌補(bǔ)了單一網(wǎng)絡(luò)安全系統(tǒng)的不足，可以很好的滿足網(wǎng)絡(luò)安全的要求。Traditional single security technology is becoming obsolete with the complexity of network security problems increased. To address this problem , a new security system architecture is proposed. This new system is based on the distributed firewall environment, and distributed network intrusion detection technology is integrated. Furthermore, Expert System is utilized to make them work coordinated and intelligently respond the real-time dynamic network security situations. This scheme can make up for the shortcomings of single security system and fulfill the requirement of network security. Description of this system architecture and some important system details are presented in this paper.