基于snort的检测引擎的分析与研究

Research and Analysis of Detection Engine based on Snort

随着互联网的迅猛发展,如何实现高速网络下的实时入侵检测己经成为现实面临的问题。对于入侵检测系统来说就需要提高它的检测效率,而提高系统效率的根本就是要对入侵检测系统的核心-检测引擎,进行优化改进。文中对snort中实现的最新检测引擎进行了详细的分析,并对其进行了性能测试。

Along with the rapid improvement of Internet, How to achieve high- speed network under the real- time intrusion detection has been a reality facing the problem. It is needed to improve the detection efficiency for intrusion detection system. However, the basic to enhance the system＇s efficiency is to improve and optimize the Detection Engine which is the core of the intrusion detection system. In this paper, snort in the realization of the latest engine testing carried out a detailed analysis and test its performance.