Analyze And Improve The Snort Intrusion Detection System

With the popularization of the network and the increasing attack from hackers,network security problem is becoming more serious.Intrusion detection as a new security means is used to detect unwanted attempts at accessing,manipulating, or disabling of computer systems thus can greatly enhance the network security.Snort is an excellent open source network intrusion detection system.This paper deeply analyze the working process and source code of Snort,summarize how to write Snort rules.In order to enhance system security,we use LSM framework to implement a security module and add password authentication mechanism for Snort.For the convenience of users,we use Gtk graphics library to design a graphical user interface.Finally,we carry out some tests and the result shows that our program achieve expected goals.