基于Linux的Snort入侵检测系统的研究与应用  

Research and Application of Snort Intrusion Detection System Based on Linux

作　　者：许礼捷[1] 

机构地区：[1]沙洲职业工学院,江苏张家港215600

出　　处：《沙洲职业工学院学报》2014年第1期3-8,共6页Journal of Shazhou Professional Institute of Technology

基　　金：2013年度沙洲职业工学院教改课题(2013SGJG002)

摘　　要：入侵检测是一种用于检测网络中违反安全策略行为,并做出保护反应的技术。从体系结构、基本功能方面对开源的Snort入侵检测系统进行深入分析,构建基于Linux平台的Snort网络入侵检测系统,并以FTP服务为例,阐述了Snort规则的配置,以及对FTP服务进行报警的过程。Intrusion detection is a kind of technology used to detect the behavior in a network security breach strategy and make the protection of network. This paper makes an in-depth analysis on the open source Snort intrusion detection system from the perspectives of the structure and basic functions of the system, builds Snort network intrusion detection system based on a Linux platform, and expounds the configuration of Snort rules, as well as the process of alarm for FTP service.

关 键 词：入侵检测 LINUX SNORT 检测规则 模式匹配 

分 类 号：TP309.2[自动化与计算机技术—计算机系统结构]