NIDS签名获取及其测试数据的生成

NIDS Signatures Acquisition and Test Data Generation

当实现一个新的NIDS检测算法时,很难获得一个实用的签名库及其测试数据。该文介绍了怎样利用Snort的签名库,以及怎样生成相应的测试数据,最后给出了一些测试数据。

It＇s hard to acquire a practical signature library and its test data when user implements a new intrusion detecting algorithm. This paper introduces how to exploit Snort^TM＇s signature library and bow to generate corresponding test data. It also gives some experiment results.