Campus network is composed of hardware, software and system. With the continuous development of the Internet, the technology of preventing Internet from being infringed has been studied. As a network protection means, intrusion detection technology hopes to prevent the factors inducing campus network security at the source and ensure that the important information in the campus network is not infringed Recognized as the most secure and appropriate technology to prevent campus network security incidents. In this paper, intrusion detection and firewall are combined to build a campus network security system. In the system, the data acquisition module is used to collect the specified network traffic data, analyze the abnormal behavior of network traffic, calculate the abnormal degree of abnormal behavior, and when the abnormal degree exceeds the threshold, the alarm is sent to the analysis module and the abnormal degree information is provided. The analysis module analyzes the abnormal alarm information from the statistical analysis module, and judges whether the alarm indicates that there is a network intrusion according to the corresponding algorithm. Through the test of campus network security system, the results show that the system has ideal intrusion detection ability, and can further improve the security protection and network management level of campus network.
