Snort-based Intrusion Detection System Applied Research In The Campus Network

Internet has gradually become a part of people's daily work and life along with its fast development. While the network brings unprecedented opportunity to the information of human society, people are also facing increasingly serious network safety problem. Intrusion detection technique is the most important network safety guarantee technique besides firewall. But different from firewall, it is a dynamic recovery.Till now, intrusion detection developed fast, from host-based intrusion detection system, to network-based intrusion detection system, and to hybrid distributed intrusion detection system. In spite of the fast evolution of the IDS technology, many new problems arise in a high-speed network. One problem is that traditional IDS can't effectually deal with the high-speed network traffic.The paper has mainly discussed the invasion detection system based on snort. On the basis of discussing operation principle of snort, have proposed the defect that the detection system exists, and optimized from the rule and the matched mode. In the last of the paper has designed a system of campus network based on snort and analysis the feasibility from audit.