基于Snort入侵检测系统的研究与设计  

Research and Design of Intrusion Detection System Based on Snort

作　　者：王冬霞[1] 张玉辉[1] 

机构地区：[1]景德镇高等专科学校,江西景德镇333000

出　　处：《科技广场》2011年第9期117-119,共3页Science Mosaic

摘　　要：针对当前越来越严重的网络入侵问题,本文设计了一个Linux下基于Snort的入侵检测系统。首先分析了入侵检测的原理,比较了特征比对与异常检测的优缺点;然后研究了Snort进行入侵检测的原理,并提出了一个入侵检测系统的设计方案;最后对本系统的优化提出了几点建议。Nowadays,the network intrusion problem is more serious,this paper designed a intrusion detection system based on Snort.First of all,this paper analyzes the principles of intrusion detection,and compares the signature-based with the anomaly-based about advantages and disadvantages;secondly,study the principles of intrusion detection about Snort,and proposed an intrusion detection system design;final made a few point proposal about optimization of the system.

关 键 词：Linux Snort 入侵检测 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]