基于Snort的边界数据包安全性检测

无论是蠕虫病毒、木马或是其他的网络攻击行为,无不向目标网络发送恶意数据包,以达到恶意攻击的目的.网络监控成为检测来自外部网络的数据包安全性的重要手段,Snort作为防火墙的补充广泛应用于网络内部,监控网络流量、数据包安全等.将Snort IDS部署在网络边界,基于CVE漏洞库建立本地Snort特征库,以检测所有通过边界的数据包,保护内网安全.

Detection of Border Data Packets Security Based on Snort

In order to attack network or computer,attackers are all send malicious packets to target to achieve theirattacking goal.For example worms,Trojan horses,or others.Network monitor is an important method to detect allthe packets from the external network.Snort,complementary of firewall,is widely used in the internal network.It canmonitor network traffic and protect network security.Taking snort in the boundary of network,establishing local snortrules database based on CVE,to detect all the packets through the...