Linux下信息监控与数据分析系统平台的搭建与应用.docVIP

PAGE PAGE 26 Linux下信息监控与数据分析系统平台的搭建与应用 摘要 Linux下的信息监控与数据分析平台，是在入侵检测的原有基础工作之上，利用的原理Snort网络入侵行为的检测和积极的系统的数据自动登录，数据的收集和分析用户活动和记录的详细信息，以便尽快地做出回应以及做出解决措施。入侵检测技术是对从前的安全技术的合理弥补。它辨认出那些对主机有威胁的行为，并对其响应。它可以协同其他的一些安全类产品工作，防止入侵。 由于信息监控与数据分析系统平台是建立在入侵检测系统的基础上的，本文从入侵检测入手，首先介绍入侵检测的相关技术，以及入侵检测的概念和分类。在后面还有snort软件的安装，完成系统平台搭建的相关软件安装和安装命令。之后，还介绍了系统平台的响应模块的结构与设计，为了能够达到目标需要，编写相应的入侵检测规则。 The monitoring platform of information and data analysis system of construction and implementation under linux Abstract Linux under the information monitoring and data analysis platform, is in the intrusion detection based on, the intrusion of network behavior actively, automatic detection and registration, system audit data, capture and analysis of network data and record the user activity state with information by using the principle of snort, which found that some intruder destrosive behavior, to response quickly and give decisions. Intrusion detection technology is a reasonable supplement to traditional security technology (such as firewall). It is able to identify and respond to malicious or malicious computer resources by monitoring the host system or network. Through the linkage with other security products, can also achieve the effective blocking of the invasion. It can work together with other security products to prevent intrusions. Because of the information monitoring and data analysis system platform is established on the intrusion detection system based on, this paper starts from the intrusion detection. Firstly, the theories show the intrusion detection technology, and intrusion detection, the concept and classification of. At the back of the installation of Snort software to complete the system platform to build the relevant software installation and installation commands. After that, it introduces the structure and design of the response module of the system platform, in order to achieve the goal, the preparation of the corresponding intrusion detection rules. 1 引言 1.1 背景 如今，随着网络进入每个人