一种改进的Snort系统的设计与应用  

Design and Application of A Improved Snort System

作　　者：林丽娜[1] 洪联系[1] 

机构地区：[1]集美大学诚毅学院,福建厦门361021

出　　处：《吉林师范大学学报（自然科学版）》2011年第4期102-104,107,共4页Journal of Jilin Normal University:Natural Science Edition

基　　金：福建省教育厅科研基金项目(JA00423)

摘　　要：入侵检测是网络安全技术领域的主要研究方向之一.为了提高入侵的检测效率,改进后的Snort系统采用了数据挖掘技术,总结出一些正常模式,能够对异常行为进行检测,并且在提高入侵检测系统的完备性和准确性的同时,也能更准确地检测某些未知攻击或者已知攻击的变种.Intrusion detection was the main area of network security technology research direction.In order to improve the efficiency of intrusion detection,the improved snort system was used data mining technology,it could sum up some of the normal mode,and used for anomaly detection.It also could help to improve intrusion detection system detection accuracy and completeness,and could detect for some unknown attacks or variants of known attacks more accurately.

关 键 词：入侵检测 数据挖掘 APRIORI算法 SNORT 

分 类 号：TP393[自动化与计算机技术—计算机应用技术] TP316[自动化与计算机技术—计算机科学与技术]