Windows环境下基于Snort的入侵检测系统应用摘要.docVIP

Windows环境下基于Snort的入侵检测系统应用 摘要 随着网络技术的快速发展和网络应用环境的不断普及，网络安全问题日益突出。在传统的加密和防火墙技术已经不能完全满足安全需求的同时，入侵检测技术作为一种全新的安全手段，越来越显示出其重要性。 Snort系统是一个典型的网络入侵检测系统，其若干设计原理和实现特点是目前多数商用入侵检测系统的研发基石。对Snort系统的研究具有较强的学术意义和较高的商业价值。 本文以Windows环境下的Snort系统为研究对象，阐述系统的基本架构并探讨了Snort系统的具体应用。首先，本文介绍了入侵检测技术的基本知识，接着以程序流程图为主要形式描述了Snort系统主体及各模块的工作流程，随后分析了基于ACID的图形界面日志管理的实现过程，再对攻击的防御规则实现进行规划设计。而后提出了一个具体的应用方案，对实验结果进行相关分析。该系统在实际应用测试中达到了预期目的，为进一步的网络管理提供了有力帮助。 实验研究的结果说明：详细地了解基于ACID的图形界面Snort的入侵检测体系与机制，依据应用环境正确地配置Snort、按攻击类型设计Snort规则及相应的预处理插件以扩展其检测功能是十分重要的。 关键词：入侵检测；snort；Windows环境；ACID图形界面 BASED ON THE SNORT INTRUSIODETECTION SYSTEM UNDER WINDOWS ENVIRONMENT ABSTRACT With the rapid development of network technology and the network environment for the continuous application of universal, the security issues of network have become increasingly prominent. In traditional encryption and firewall technology can not fully meet the security needs at the same time, intrusion detection technology as a new means of security, more and more show its importance. ???????Snort is a typical network intrusion detection system and its design principle and the realization of a number of features is the majority of commercial intrusion detection system as the cornerstone of the research and development. Systematic study of Snort has a strong academic significance and higher commercial value.  In this thesis, under the Windows environment Snort system to study the basic structure of the system and to explore the specific application of Snort system. First of all, Intrusion Detection This paper introduces the basic knowledge of technology, and then to the procedures described in flow chart form as the main subject of the Snort system and workflow module, followed by an analysis of the graphical interface based on the ACID of the realization of the process of log management, and then to attack the realization of defense for planning and design rules. Then put forward a specific application program, experimental result