Research On Application Of Intrusion Detection System Based On Snort In Campus Network

In recent years, with the rapid development of the network technology andthe extensive popularization of Internet, the security of network becomes moreand more important. A main threat of the network security is to invade to theinformation system through network. As one important component of networksecurity, the Network Intrusion Detection System (NIDS) becomes more andmore important.Colleges and universities are a breeding base of the new technology. Withthe arrival of the information era, they are promoting their own informationconstruction. As the scale of the campus network becomes bigger and bigger, itssecurity problem will be more and more serious. Depends upon the traditionalfirewall technology can not be able to guarantee the campus network. Therefore,this article proposed the method of combining the NIDS and the firewall torealize the campus network safe protection. NIDS which is used for monitoringthe network data flow can alert when the intrusion happens. Already NIDS ofmuch commerce has appeared now, but they are mostly more complicated, moredifficult to master, and more expensive, and the smaller companies are unable tobear.Snort2.0 is an outstanding and free NIDS system, which based on GPL, andit is also a strong NIDS of lightweight. Firstly this text introduces theclassification of the intrusion detection system, the current research circumstance,the trend of development and the technology used mostly. Secondly, this textintroduces the system architecture, technological characteristics and functions ofSnort2.0 IDS, mainly research the construction of the system, establishment andrunning of Snort 2.0 Intrusion Detection Rules. On the basis of study andexperiment, the paper proposes a design which uses Snort 2.0 in compus network to protect its security. Meanthwhile, the configuration scheme, the method ofinstalling and using, the situation of running and test of the Snort2.0 IDS incampus network are given.The application and test result shows that, the NIDS based on snort2.0 canguarantee the campus network well.