The Study And Analysis Of A Net Intrusion Detection System

Along with the fast development of the network technology and the universal application of the network environmental, the safe problem in network is increasingly outstanding. The traditional Encryption techniques and the Fire wall technique can't meet the expectations fully. And as a safe means, Intrusion Detection techniques has displayed its important role.The Snort is a typical Net Intrusion Detection System, and some of design principle and characteristics of which is the base of most popular mercantile Intrusion Detection System. There are strong academically and commercial value to the research of Snort.In this text, writer regards Snort as the research object, analyzing its source code and rules, expounding the basic structure of the Snort system , and studying the technique in application of Snort. First, the basic knowledge of intrusion detection is introduced. Then the principal part of Snort and the module of its working process is presented with the procedural graph, and the typical snort rules is analyzed. Last, a concrete apply scheme is put forward and the reform from IPv4 to IPv6 of snort is discussed.