Design And Implementation Of The Improved System Based On The Snort Intrusion Detection System

Over the last decade, as the increasing popularity of Internet technology widely used in government, business, education, communication, finance, etc.The government, business, education, communication, finance, etc. have to face the attack of computer viruses and network intrusion by hackers. The possibility of intrusion is based on the functional system. The more complex and the more powerful of a system, the more likely it intruded by the virus. As much as possible to ensure that these institutions and industry computer systems are not destroyed by means of the network and the attacks have become one of the most important tasks of network management, network security issues are inevitably placed in the world.Computer and network security solutions, such as encryption, firewall technology, anti-hacking technology and instability of the entire system scanning, detection and alarm and burglar alarm, etc. With the further development of information security technology has already emerged, developed and enhanced. Among many technical means of security, computer network intrusion detection technology could search for itself to proactively detect network for security vulnerabilities and weaknesses, but also to detect early risk behaviors and found that the characteristics of dangerous attacks and alert, and then take effective measures to implement the protection. Thus, the intrusion detection technology has naturally become more reliable and feasible safety technology. Intrusion detection system Snort is also one of the best.In this thesis, the writer analysis Snort intrusion detection system, which includes architecture structure, working principle and detailed rules, found that detection performance of its high-speed network to cope with the shortcomings and deficiencies, and accordingly made use of relevant technologies and means to improve the performance of Snort and the actual results.Finally, according to University of Electronic Science and Technology Laboratory, Zhongshan College network protection system integrated on specific issues, Expounds the design concept of the intrusion detection system, design a feasible Snort intrusion detection system based on the design of implementation program, which detailed planning of the system flow analysis, engine design, the rule base design and console design. Hope that this program needs to improve network security for the relevant units of a certain reference value and practical significance.