利用多线程技术提高入侵检测系统的实时性能

Improving the Real-time Performance of IDS by Using Multithread Technology

针对目前广泛使用的开放式入侵检测系统(Snort)在实际开发应用过程中存在的系统实时检测能力较弱的突出问题,通过引入多线程技术,在标准Snort系统平台的基础上进行二次研究、开发,极大增强Snort系统的实时性能,使其在网络应用中发挥更大的安全保障作用。

Aiming at the weaknesses of the widely used IDS (Snort) with open source code, such as the weak real-time detection ability, this paper focuses on the study and improvement of the real-time performance of IDS based on standard Snort platform by applying new technologies such as multithread programming, so as to make the Snort play a more important role in network security.