The Research And Application For Intrusion Detection System In Campus Network

With the development of the computer application technology and network communication technology, the computer network not only is gradually changing the way people work and live, but also takes a profound impact on the economic and cultural development of the world. However, the rapid development and popularization of network technology also gave a series of questions to people, which especially is the network information security. The traditional security defense technology, such as firewalls, identity authentication and data encryption though are more mature, but it still can't satisfy the needs of network security. Intrusion detection system is developing in this background, it's a kind of active protect themselves against attack of dynamic network security technique, it's the reasonable added to firewall. Through the analysis of the host log or network packet, intrusion detection system can prompt the discovery of intrusion and alarm.This paper analyzed the present situation of campus network security and suggested that we must introduce intrusion detection technology for solving the campus network security. In order to use the intrusion detection system in the campus network of YELLOW RIVER CONSERVANCY TECHNICAL INSTITUTE, this paper firstly described the intrusion detection system's concept,developing history,classification method,development trend, and analyzed the characteristics,function,working procedures and rules of the snort intrusion detection system. Then, according to the campus network's situation of The YELLOW RIVER CONSERVANCY TECHNICAL INSTITUTE we designed the three-layer structure of intrusion detection system mode which to the SNORT as the core based on the actual situation, it mainly included the detector,data storage centers,management control center and specific realized the function of each part in the model. In order to improve the performance of the intrusion detection system, we adopted the intrusion detection technology which based on the protocol analysis and pattern matching combination. In the application stage, we first researched the development of the intrusion detection system in the campus network. Then, we tested the function of intrusion detection system through the system performance test experiment and practical teaching network attack in the running and summarized the detection results, this explained that the system which has been designed in this paper can provide more effective safeguard to the security of campus network.