摘要
本文重点介绍了入侵安全检测系统的扩展和原理,并合理地分析了现有的入侵检测系统的现状,以轻量级入侵检测系统Snort为模型,分析了Snort系统的程序结构,最后提出了一种新的规则匹配算法,对网络数据的分析做了扩展。
This paper has introduced the concept and principle of invading the detection system stressly. And analyses the situation of intrusion detection system reasonablely, then regard invading detection system Snort in lightweight as models, analyse the system structure, present a kind of new match arithmetic finally, the analysis on network data have been expanded.