提高Snort规则匹配速度方法的研究与实现

Research and Implementation on Increasing speed of Rule-matching in Snort

当今的网络环境变得越来越复杂,网络安全管理员的工作不断加重,不经意的疏忽便有可能遗留下安全的重大隐患,同时,网上黑客教程和千余种入侵工具随手可得,使网络安全问题防不胜防。该文对开放源代码入侵检测系统Snort的规则匹配算法进行分析,重新构造了Snort搜索引擎,从而提高了规则匹配速度。

While th serious accordingly. convenient to obtain article analyzes the the on - line course and rules matching algorithm of tentative work is done to rebuild the examination a thousand Snort ,an Engineer of more and more complex, the network security manager＇s work changes to be more possibility to leave behind the significant hidden danger of safety. Moreover, it is kinds of invasion tools, which poses great challenges to the network security. This open source-code NIDS.In order to increase effectively the rule matching speed,some Snort.