基于Snort的代理服务器检测  

The Detecting for ARP Spoofing Based on Snort

作　　者：侯向宁[1] 刘华春[1] 

机构地区：[1]成都理工大学工程技术学院,四川乐山614007

出　　处：《北京联合大学学报》2015年第4期8-12,共5页Journal of Beijing Union University

基　　金：四川省教育厅自然科学重点项目(12ZA200)

摘　　要：Snort是一个开放源代码的、功能强大的、跨平台的、轻量级的网络入侵检测系统,它具有很好的扩展性和可移植性,能检测各种不同的攻击方式,并能对各种攻击进行实时的报警,其强大的功能和灵活性可以满足多种应用环境的需求。在分析代理服务器原理的基础上,根据代理服务器的变量特征,利用Snort实现了对代理服务器的检测。Snort is an open source,powerful,cross-platform,lightweight network intrusion detection system. It has a good scalability and portability,and can detect a variety of attacks as well as carry out real-time alarm against various attacks. Its powerful functions and flexibility can meet the needs of a variety of applications. Based on the analysis on the principle of proxy server,the detection of the proxy server is realized using the variable characteristics of proxy server.

关 键 词：代理 SNORT 网络入侵检测系统 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]