Snort入侵檢測系統(tǒng)分析與改進.pdf

1、華北電力大學(xué)碩士學(xué)位論文摘要隨著網(wǎng)絡(luò)的普及和黑客攻擊的增加，網(wǎng)絡(luò)安全問題變得日益嚴(yán)重。入侵檢測作為一種全新的安全手段，用于檢測對電腦系統(tǒng)非預(yù)期的訪問、控制和破壞嘗試，可以使網(wǎng)絡(luò)的安全性得到很大的提高。Snt是一款出色的開源網(wǎng)絡(luò)入侵檢測系統(tǒng)。本文深入分析了Snt的源代碼，給出了Snt的工作流程，總結(jié)了Snt規(guī)則的編寫。為了提高系統(tǒng)安全性，采用LSM框架為Snt設(shè)計實現(xiàn)了一個安全模塊，并增加了密碼認(rèn)證機制。為了方便用戶的使用，用圖形庫Gtk

2、為Snt設(shè)計了用戶界面。改進后的Snt經(jīng)過測試，結(jié)果表明程序達到了預(yù)期的設(shè)計目標(biāo)。關(guān)鍵詞:Snort，入侵檢測系統(tǒng)，Linux安全模塊，能力安全機制，VteTerminalABSTRACTWiththePoPularizationofthenetworkandtheinereasingattaekfromhaekers，networkseeurityProblem15beeomingmoreserious.Intrusiondeteet

3、ionasanewsecuritymeans15usedtodeteetunwantedattemPtsataeeessing，maniPulating，ordisablingofcomPutersystemsthuscangreatlyenhaneethenetworkseeurity.Snort15anexeellentoPensourcenetworkintrusiondeteetionsystem.ThisPaPerdeePly

4、analyzetheworkingProcessandsourdeeodeofSnort，summarizehowtowriteSnortrules.Inordertoenhancesystemsecurity，weuseLSMframeworktoimPlementaseeuritymoduleandaddPasswordauthentieationmeehanismforSnort.Fortheconvenieneeofusers，

5、weuseGtkgraPhicslibrarytodesignagraPhiealuserinterfaee.Finally，weearryoutsometestsandtheresultshowsthatourProgramaehieveexPeetedgoals.LuKui(ComPuterAPPlicationTeehnology)DirectedbyProf.XiaHongKEYWORDS:Snort，IDS，LSM，CaPab

6、ilities，VteTer而nal下華北電力大學(xué)碩士學(xué)位論文4.1.4內(nèi)核模塊的實現(xiàn).........................................................……。...............................……374.2圖形界面設(shè)計.........................................................................

7、.................................……404.2.1XWINDow與GTK..............................................................................................……404.2.2密碼認(rèn)證的實現(xiàn).........................................................

8、......................................……424.2.3規(guī)則管理的實現(xiàn)...............................................................................................……434.2.4調(diào)用輸出的實現(xiàn).......................................................

9、..............……，..................……44第五章系統(tǒng)測試..........................................................................................................……465.1安全模塊測試.......................................................

10、...................................................……465.2檢測效果測試..........................................................................................................……50第六章結(jié)論.........................................

11、.........................................................................……54參考文獻.............................................................……，‘……，，二，....……，........……，....……，.……55致謝....................................