{"id":3884,"date":"2025-10-20T11:12:00","date_gmt":"2025-10-20T11:12:00","guid":{"rendered":"https:\/\/lp.szlogic.cn\/glossary\/ips-intrusion-prevention-system-explained\/"},"modified":"2026-06-22T06:10:45","modified_gmt":"2026-06-22T06:10:45","slug":"ips-intrusion-prevention-system-explained","status":"publish","type":"post","link":"https:\/\/resourceslp.szlogic.cn\/vi\/glossary\/ips-intrusion-prevention-system-explained","title":{"rendered":"H\u1ec7 th\u1ed1ng ng\u0103n ch\u1eb7n x\u00e2m nh\u1eadp (IPS) l\u00e0 g\u00ec?"},"content":{"rendered":"
\"What<\/figure>\n\n\n\n

\ud83d\udee1\ufe0f <\/strong>H\u1ec7 th\u1ed1ng ng\u0103n ch\u1eb7n x\u00e2m nh\u1eadp (IPS) l\u00e0 g\u00ec?<\/h2>\n\n\n\n

M\u1ed9t H\u1ec7 th\u1ed1ng ng\u0103n ch\u1eb7n x\u00e2m nh\u1eadp (IPS)<\/strong> is a Gi\u1ea3i ph\u00e1p b\u1ea3o m\u1eadt m\u1ea1ng th\u1eddi gian th\u1ef1c<\/strong> \u0110\u01b0\u1ee3c thi\u1ebft k\u1ebf \u0111\u1ec3 ph\u00e1t hi\u1ec7n, ph\u00e2n t\u00edch v\u00e0 t\u1ef1 \u0111\u1ed9ng ch\u1eb7n l\u01b0u l\u01b0\u1ee3ng \u0111\u1ed9c h\u1ea1i tr\u01b0\u1edbc khi n\u00f3 c\u00f3 th\u1ec3 x\u00e2m ph\u1ea1m h\u1ec7 th\u1ed1ng ho\u1eb7c d\u1eef li\u1ec7u. \u0110\u00f3ng vai tr\u00f2 nh\u01b0 m\u1ed9t l\u1edbp b\u1ea3o m\u1eadt ch\u1ee7 \u0111\u1ed9ng, IPS li\u00ean t\u1ee5c gi\u00e1m s\u00e1t c\u00e1c g\u00f3i tin m\u1ea1ng v\u00e0 ng\u0103n ch\u1eb7n c\u00e1c ho\u1ea1t \u0111\u1ed9ng \u0111\u00e1ng ng\u1edd d\u1ef1a tr\u00ean ph\u00e2n t\u00edch h\u00e0nh vi, th\u00f4ng tin t\u00ecnh b\u00e1o v\u1ec1 m\u1ed1i \u0111e d\u1ecda v\u00e0 ph\u00e1t hi\u1ec7n theo ch\u1eef k\u00fd.<\/p>\n\n\n\n

N\u00f3i m\u1ed9t c\u00e1ch \u0111\u01a1n gi\u1ea3n, trong khi m\u1ed9t t\u01b0\u1eddng l\u1eeda<\/a> l\u1ecdc l\u01b0u l\u01b0\u1ee3ng d\u1ef1a tr\u00ean c\u00e1c quy t\u1eafc \u0111\u00e3 \u0111\u01b0\u1ee3c x\u00e1c \u0111\u1ecbnh tr\u01b0\u1edbc, th\u00ec IPS ch\u1ee7 \u0111\u1ed9ng ch\u1eb7n v\u00e0 ng\u0103n ng\u1eeba c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng m\u1ea1ng<\/strong> nh\u01b0 ti\u00eam ph\u1ea7n m\u1ec1m \u0111\u1ed9c h\u1ea1i, c\u00e1c n\u1ed7 l\u1ef1c t\u1eeb ch\u1ed1i d\u1ecbch v\u1ee5 (DoS) v\u00e0 khai th\u00e1c l\u1ed7 h\u1ed5ng zero-day.<\/p>\n\n\n\n

\ud83d\udee1\ufe0f <\/strong>C\u00e1ch th\u1ee9c ho\u1ea1t \u0111\u1ed9ng c\u1ee7a IPS<\/h2>\n\n\n\n

IPS ho\u1ea1t \u0111\u1ed9ng theo ch\u1ebf \u0111\u1ed9 n\u1ed1i ti\u1ebfp (inline)\u2014tr\u1ef1c ti\u1ebfp gi\u1eefa m\u1ea1ng v\u00e0 \u0111\u00edch \u0111\u1ebfn\u2014cho ph\u00e9p n\u00f3 ki\u1ec3m tra m\u1ecdi g\u00f3i tin \u0111i qua. Quy tr\u00ecnh c\u1ed1t l\u00f5i c\u1ee7a n\u00f3 bao g\u1ed3m:<\/p>\n\n\n\n

    \n

  1. Gi\u00e1m s\u00e1t l\u01b0u l\u01b0\u1ee3ng:<\/strong> T\u1ea5t c\u1ea3 c\u00e1c g\u00f3i tin v\u00e0o v\u00e0 ra \u0111\u1ec1u \u0111\u01b0\u1ee3c ki\u1ec3m tra theo th\u1eddi gian th\u1ef1c.<\/p><\/li>

  2. Ki\u1ec3m tra s\u00e2u g\u00f3i tin (DPI):<\/strong> H\u1ec7 th\u1ed1ng ph\u00e2n t\u00edch d\u1eef li\u1ec7u v\u01b0\u1ee3t ra ngo\u00e0i ph\u1ea7n ti\u00eau \u0111\u1ec1, nh\u1eadn di\u1ec7n c\u00e1c m\u1eabu ho\u1eb7c t\u1ea3i tr\u1ecdng kh\u1edbp v\u1edbi c\u00e1c m\u1ed1i \u0111e d\u1ecda \u0111\u00e3 bi\u1ebft.<\/p><\/li>

  3. Ph\u00e1t hi\u1ec7n b\u1ea5t th\u01b0\u1eddng:<\/strong> IPS s\u1eed d\u1ee5ng c\u00e1c m\u00f4 h\u00ecnh heuristics v\u00e0 h\u00e0nh vi \u0111\u1ec3 ph\u00e1t hi\u1ec7n c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng ch\u01b0a t\u1eebng bi\u1ebft tr\u01b0\u1edbc \u0111\u00e2y.<\/p><\/li>

  4. Ph\u1ea3n \u1ee9ng t\u1ef1 \u0111\u1ed9ng:<\/strong> Khi ph\u00e1t hi\u1ec7n m\u1ed1i \u0111e d\u1ecda, IPS c\u00f3 th\u1ec3 ch\u1eb7n l\u01b0u l\u01b0\u1ee3ng, thi\u1ebft l\u1eadp l\u1ea1i k\u1ebft n\u1ed1i ho\u1eb7c c\u1ea3nh b\u00e1o cho qu\u1ea3n tr\u1ecb vi\u00ean.<\/p><\/li>\n<\/ol>\n\n\n\n

    Kh\u1ea3 n\u0103ng ng\u0103n ch\u1eb7n th\u1eddi gian th\u1ef1c n\u00e0y khi\u1ebfn IPS tr\u1edf th\u00e0nh th\u00e0nh ph\u1ea7n thi\u1ebft y\u1ebfu c\u1ee7a h\u1ec7 th\u1ed1ng ph\u00f2ng th\u1ee7 m\u1ea1ng doanh nghi\u1ec7p hi\u1ec7n \u0111\u1ea1i<\/strong>, th\u01b0\u1eddng \u0111\u01b0\u1ee3c t\u00edch h\u1ee3p c\u00f9ng t\u01b0\u1eddng l\u1eeda<\/a>, c\u00e1c h\u1ec7 th\u1ed1ng SIEM v\u00e0 c\u00f4ng c\u1ee5 ch\u1ed1ng vi-r\u00fat.<\/p>\n\n\n\n

    \"How<\/figure>\n\n\n\n

    \ud83d\udee1\ufe0f <\/strong>IPS so v\u1edbi IDS: S\u1ef1 kh\u00e1c bi\u1ec7t l\u00e0 g\u00ec?<\/h2>\n\n\n\n

    M\u1eb7c d\u00f9 c\u00f3 m\u1ed1i li\u00ean h\u1ec7 ch\u1eb7t ch\u1ebd, H\u1ec7 th\u1ed1ng ph\u00e1t hi\u1ec7n x\u00e2m nh\u1eadp (IDS)<\/strong> and H\u1ec7 th\u1ed1ng ng\u0103n ch\u1eb7n x\u00e2m nh\u1eadp (IPS)<\/strong> kh\u00e1c nhau v\u1ec1 ch\u1ee9c n\u0103ng v\u00e0 ph\u1ea3n \u1ee9ng:<\/p>\n\n\n\n

    \n\n<\/colgroup>

    \u0110\u1eb7c t\u00ednh<\/p><\/th>

    IDS (H\u1ec7 th\u1ed1ng ph\u00e1t hi\u1ec7n x\u00e2m nh\u1eadp)<\/p><\/th>

    IPS (H\u1ec7 th\u1ed1ng ng\u0103n ch\u1eb7n x\u00e2m nh\u1eadp)<\/p><\/th><\/tr>

    Vai tr\u00f2<\/p><\/td>

    Gi\u00e1m s\u00e1t v\u00e0 c\u1ea3nh b\u00e1o v\u1ec1 c\u00e1c ho\u1ea1t \u0111\u1ed9ng \u0111\u00e1ng ng\u1edd<\/p><\/td>

    Ph\u00e1t hi\u1ec7n v\u00e0 ch\u1eb7n m\u1ed1i \u0111e d\u1ecda theo th\u1eddi gian th\u1ef1c<\/p><\/td><\/tr>

    Lo\u1ea1i ph\u1ea3n \u1ee9ng<\/p><\/td>

    B\u1ecb \u0111\u1ed9ng (ch\u1ec9 th\u00f4ng b\u00e1o)<\/p><\/td>

    Ch\u1ee7 \u0111\u1ed9ng (ng\u0103n ch\u1eb7n t\u1ef1 \u0111\u1ed9ng)<\/p><\/td><\/tr>

    Tri\u1ec3n khai<\/p><\/td>

    Ngo\u00e0i b\u0103ng t\u1ea7n (ch\u1ec9 gi\u00e1m s\u00e1t)<\/p><\/td>

    N\u1ed1i ti\u1ebfp (ch\u1ee7 \u0111\u1ed9ng ch\u1eb7n l\u01b0u l\u01b0\u1ee3ng)<\/p><\/td><\/tr><\/tbody>\n<\/table>\n<\/figure>\n\n\n\n

    T\u00f3m l\u1ea1i, IDS ph\u00e1t hi\u1ec7n, IPS ph\u00f2ng th\u1ee7.<\/strong>Ph\u1ea7n l\u1edbn c\u00e1c t\u1ed5 ch\u1ee9c hi\u1ec7n \u0111\u1ea1i tri\u1ec3n khai IPS nh\u01b0 m\u1ed9t ph\u1ea7n c\u1ee7a T\u01b0\u1eddng l\u1eeda th\u1ebf h\u1ec7 m\u1edbi (NGFW)<\/strong> nh\u1eb1m qu\u1ea3n l\u00fd th\u1ed1ng nh\u1ea5t c\u00e1c m\u1ed1i \u0111e d\u1ecda.<\/p>\n\n\n\n

    \ud83d\udee1\ufe0f <\/strong>C\u00e1c lo\u1ea1i H\u1ec7 th\u1ed1ng ng\u0103n ch\u1eb7n x\u00e2m nh\u1eadp ch\u00ednh<\/h2>\n\n\n\n

    Vi\u1ec7c hi\u1ec3u r\u00f5 c\u00e1c danh m\u1ee5c IPS gi\u00fap l\u1ef1a ch\u1ecdn m\u00f4 h\u00ecnh ph\u00f9 h\u1ee3p cho c\u00e1c m\u00f4i tr\u01b0\u1eddng m\u1ea1ng kh\u00e1c nhau:<\/p>\n\n\n\n

      \n

    1. IPS d\u1ef1a tr\u00ean m\u1ea1ng (NIPS):<\/strong>Gi\u00e1m s\u00e1t l\u01b0u l\u01b0\u1ee3ng tr\u00ean to\u00e0n b\u1ed9 m\u1ea1ng v\u00e0 ng\u0103n ch\u1eb7n c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng quy m\u00f4 l\u1edbn.<\/p><\/li>

    2. IPS kh\u00f4ng d\u00e2y (WIPS):<\/strong>B\u1ea3o v\u1ec7 m\u00f4i tr\u01b0\u1eddng Wi-Fi b\u1eb1ng c\u00e1ch ph\u00e1t hi\u1ec7n c\u00e1c thi\u1ebft b\u1ecb l\u1ea1 \u0111i\u1ec3m truy c\u1eadp<\/a> v\u00e0 c\u00e1c cu\u1ed9c x\u00e2m nh\u1eadp kh\u00f4ng d\u00e2y.<\/p><\/li>

    3. IPS d\u1ef1a tr\u00ean m\u00e1y ch\u1ee7 (HIPS):<\/strong>\u0110\u01b0\u1ee3c c\u00e0i \u0111\u1eb7t tr\u1ef1c ti\u1ebfp tr\u00ean c\u00e1c \u0111i\u1ec3m cu\u1ed1i ho\u1eb7c , and fiber optic links through interchangeable transceiver modules. Unlike standard RJ45 Ethernet ports, SFP ports can support both fiber optic and copper Ethernet connections depending on the installed module.<\/a> \u0111\u1ec3 gi\u00e1m s\u00e1t c\u00e1c ti\u1ebfn tr\u00ecnh c\u1ee5c b\u1ed9 v\u00e0 c\u00e1c l\u1ec7nh g\u1ecdi h\u1ec7 th\u1ed1ng.<\/p><\/li>

    4. Ph\u00e2n t\u00edch h\u00e0nh vi m\u1ea1ng (NBA):<\/strong>S\u1eed d\u1ee5ng d\u1eef li\u1ec7u lu\u1ed3ng \u0111\u1ec3 x\u00e1c \u0111\u1ecbnh c\u00e1c m\u1eabu l\u01b0u l\u01b0\u1ee3ng b\u1ea5t th\u01b0\u1eddng nh\u01b0 c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng DDoS ho\u1eb7c n\u1ed7 l\u1ef1c tr\u00edch xu\u1ea5t d\u1eef li\u1ec7u.<\/p><\/li>\n<\/ol>\n\n\n\n

      \ud83d\udee1\ufe0f<\/strong> L\u1ee3i \u00edch ch\u00ednh khi tri\u1ec3n khai IPS<\/h2>\n\n\n\n