摘要
Snort入侵检测系统的效率直接取决于用于检测规则的规则集质量。创建理想的规则集,是使Snort检测速度得到提高的关健。现讲述了Snort规则优化的具体过程,优化时出现的问题及对问题的解决办法。
The efficiency of set inspection technologies is directly linked to the quality of the set that used for ruleinspection of Snort. It is the rule optimizer＇s key step to create a rule setthat is ideal for use in set inspection technology. This paper introduced the Snort rule optimizer technology, and question prob-bly appeared and the solution.
出处
《信息技术》
2008年第8期116-118,共3页
Information Technology
关键词
入侵检测
规则优化
模式匹配
model matching
intrusion detection system
rule optimizer
