Research on intelligent intrusion prevention system based on Snort
Research on intelligent intrusion prevention system based on Snort
复制标题
基于Snort的智能入侵防御系统研究
DOI：
--
复制
发表时间：
2010
期刊：
影响因子：
--
通讯作者：
Dihua Liu
中科院分区：
文献类型：
--
作者：
Hui Li;Dihua Liu
由于防火墙和入侵检测系统在信息安全领域的局限性，入侵防御系统应运而生。它是继防火墙和入侵检测技术之后的新一代信息安全技术。它也是一种实时保护网络和系统免受攻击的安全产品，现已成为网络安全领域的研究热点。本文主要研究支持向量机在Snort入侵检测系统中的应用，并将Snort入侵检测系统与防火墙相结合，实现了一个小规模的智能入侵防御系统。
Due to the limitation of the firewall and intrusion detection system in the information security domain, intrusion prevention system (IPS) appeared. It is a new generation information security technology following the firewall and intrusion detection technique. It is also a secure product that protects the network and system in real time from attacking, and now becomes a hotspot of research in network security domain. This article mainly focuses on the support vector machine (SVM) applying to Snort intrusion detection system, then implements a small scale intelligent intrusion prevention system by combining Snort intrusion detection system and firewall.