基于Snort和OpenWrt的网络入侵检测与防御系统

Network Intrusion Detection and Defense System Based on Snort and OpenWrt

针对日益严重的网络安全问题,提出一个新的基于网络的入侵检测系统设计方案。该系统基于开源的OpenWrt路由系统,配合使用开源的Snort入侵检测系统作为整个系统的检测引擎,联动邮件系统和外部防火墙,使用Python和MySQL开发一个基于网络的入侵防御系统。在开发、部署该系统后,经过测试,该系统能够高效地实现入侵检测功能,并且因为Snort开源社区较为活跃的原因,所以该系统具有良好的开发者支持,市场应用前景广阔。

In view of the increasingly serious network security problems,puts forward a new intrusion detection system based on network design scheme of the system is based on open source OpenWrt routing system,with the use of open source Snort intrusion detection system as a whole system detection engine,linkage mail system and external firewalls,uses Python and MySQL to develop a network-based intrusion prevention system in the development.After deploying the system,it has been tested that it can effectively implement intrusion detection function.Moreover,because Snort open source community is relatively active,the system has good developer support and broad market ap⁃plication prospects.