一种改进的Snort系统的设计与应用

Design and Application of A Improved Snort System

入侵检测是网络安全技术领域的主要研究方向之一.为了提高入侵的检测效率,改进后的Snort系统采用了数据挖掘技术,总结出一些正常模式,能够对异常行为进行检测,并且在提高入侵检测系统的完备性和准确性的同时,也能更准确地检测某些未知攻击或者已知攻击的变种.

Intrusion detection was the main area of network security technology research direction.In order to improve the efficiency of intrusion detection,the improved snort system was used data mining technology,it could sum up some of the normal mode,and used for anomaly detection.It also could help to improve intrusion detection system detection accuracy and completeness,and could detect for some unknown attacks or variants of known attacks more accurately.