3. The original Snort intrusion detection system was based on single data pack inspection, however, because of network mass information, more and more attack packages use data dividing means to evade the detection of Snort. Herein, the author introduces data mining technology into the key detection part of this system, and presents "second detection module", as well as a detection way based on the data mining technology, so as to provide a sound theory foundation for future research.

基于1个网页-相关网页