随着现代网络信息技术的不断发展，作为传统被动的网络安全防御手段已经无法有效应对不断变化的新型网络威胁，不能满足当前网络安全的需求。作为现如今主要网络防御手段，主动防御克服传统防御的诸多缺陷，能够有效应对未知网络活动，展现出很强的优势。从主动防御的发展过程出发，对网络安全主动防御目前存在的主要技术进行了梳理，总结分析了网络安全入侵防护、网络安全入侵检测、网络安全入侵预测、网络安全入侵响应4个层面的主要技术优缺点，并对其未来发展方向进行了分析与展望。

With the continuous development of modern network information technology, the traditional passive network security defences are static defences that can not effectively respond to new types of network threats and can no longer meet the needs of network security. As the main network defence mean, active defence overcomes the many defects of traditional defence, can effectively respond to unknown network activities, showing strong advantages. Starting from the development process of active defense, the main technologies currently existing in network security active defense were sorted out, and the advantages and disadvantages of the main technologies at four levels, namely, network security intrusion defence, network security intrusion detection, network security intrusion prediction, and network security intrusion response, were summarised and analyzed, as well as the analysis and outlook of its future development direction.