基于LINUX入侵检测系统分析

Study on Intrusion Detection System based on the LINUX

入侵检测系统(Intrusion Detection System,简称IDS)是对防火墙的必要补充,它通过对计算机网络或计算机系统中的若干关键点收集信息并对其进行分析,从中发现网络或系统中是否有违反安全策略的行为和被攻击的迹象。本文首先介绍入侵检测研究背景,然后在LINUX操作系统上介绍轻量级入侵检测系统snort,并就相关技术进行分析。

Intrusion Detection System is the necesarry supplementary of firewall. By collecting information and analying to computer network or several key of computer system, IDS finds the network from it or violate thebehavior of the safe tactics and sign attacked in the system. This paper presented the introduction of IDS, and based on that, invading detection system Snort in lightweight as model is analysed and studied.