Choosing Linux OS as the basis, and making use of LSM framework to present the kernel patch of Netfilter firewall and LIDS invasion detection as LKM fashion, we construct a host secure defense system.

• 本文选用Linux系统作为基础，并利用LSM框架将内核补丁Netfilter防火墙、LIDS入侵检测作为LKM形式出现，架构一个主机安全防御系统。