基于snort的检测引擎的分析与研究  

Research and Analysis of Detection Engine based on Snort

作　　者：曹煦晖[1] 

机构地区：[1]集美大学计算机工程学院,福建厦门361021

出　　处：《安顺学院学报》2009年第1期94-96,共3页Journal of Anshun University

摘　　要：随着互联网的迅猛发展,如何实现高速网络下的实时入侵检测己经成为现实面临的问题。对于入侵检测系统来说就需要提高它的检测效率,而提高系统效率的根本就是要对入侵检测系统的核心-检测引擎,进行优化改进。文中对snort中实现的最新检测引擎进行了详细的分析,并对其进行了性能测试。Along with the rapid improvement of Internet, How to achieve high- speed network under the real- time intrusion detection has been a reality facing the problem. It is needed to improve the detection efficiency for intrusion detection system. However, the basic to enhance the system＇s efficiency is to improve and optimize the Detection Engine which is the core of the intrusion detection system. In this paper, snort in the realization of the latest engine testing carried out a detailed analysis and test its performance.

关 键 词：入侵检测引擎 规则 SNORT 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]