Abstract: According to the analysis of traditional network security, a DNS protocol parsing engine based on IPS was designed and implemented. The architecture and functions of a DNS protocol parsing engine based on IPS was described and related models were established. In the engine, advanced NEL language was used as developing platform to detect real-time anomaly traffic and ensure real-time and high-powered network security.

Key words: IPS, DNS, NEL 

摘要： 在对传统的网络安全技术进行研究的基础上，设计和实现了基于IPS的DNS协议解析引擎。阐述了DNS协议解析引擎的总体框架，建立了相关的模型。该引擎采用先进的NEL语言开发平台，实时地检测出异常流量，实现了实时、高性能的网络安全。

关键词: IPS, DNS, NEL