Snort规则优化技术分析  

Analysis of Snort Rule Optimizer Technology

作　　者：郑敬华[1] 陆余良[1] 

机构地区：[1]解放军电子工程学院,安徽合肥230037

出　　处：《安徽电子信息职业技术学院学报》2004年第5期69-71,共3页Journal of Anhui Vocational College of Electronics & Information Technology

摘　　要：规则优化是Snort2.0及以上版本检测引擎的主要部件。规则检测技术的效率直接取决于用于 检测规则的规则集质量。创建理想的规则集,是使snort规则检测速度得到提高的关键。本文讲述了snort规 则优化的具体过程,优化时出现的问题及对问题的解决办法。The Rule Optimizer is a major component of the Snort detection engine. The efficiency of set inspection technologies is directly linked to the quality of the set that used for rule inspection. It is the Rule Optimizer's key step to create a rule set that is ideal for use in set inspection technology. This paper introduce the snort Rule Optimizer technology, and question probably appeared and the solution.

关 键 词：SNORT规则 规则集 检测规则 优化技术 引擎 部件 过程 讲述 版本 创建 

分 类 号：TN948.12[电子电信—信号与信息处理] TP393.08[电子电信—信息与通信工程]