基于Snort的入侵防御系统的技术研究和实现

Research on intrusion prevention system based on Snort and its implementation

针对网络安全防御问题,论述了入侵防御系统的2种体系结构———网络IPS和主机IPS,介绍了防火墙和PS之间互动的实现方式。通过将Snort安装为内嵌模式,利用snort-inline,结合内嵌式互动技术和外联式互动技术,设计并实现了一种基于Snort的具备了初步入侵防御功能的原型系统。

Focusing on the problem of network security prevention, this paper has discussed two kinds of system structure of intrusion prevention system（IPS）such as as network intrusion prevention system （NIPS） and host-based intrusion prevention system（HIPS） ,and has made an introduction to the implementation between the IPS and the firewwall. Through installing the Snort inline, utilizing snort-inline, and combining the inline interaction technology and outside uniting interaction technology, this paper has designed and realized a prototype system, which is based on Snort and possesses the preliminary function of intrusion prevention.