Application of Anomaly Detection Technology in Snort System
Zhuang Wei-hua · Computer Technology and Development · 2006
Snort intrusion detection system is an open source IDS.This paper analyzes the structure,advantages and disadvantages of Snort,and then puts forward an anomaly detection technology based on network payload,request type,request length,and byte frequency to remedy the disadvantages of abuse detection technology used by Snort.This paper designs a system model with two levels of packages process level and statistical process level and plugs it into the Snort to enhance its ability of intrusion detection.