随着互联网的不断发展,入侵检测系统已变成计算机网络安全防范体系的重要组成部分之一。本文是在介绍了入侵检测系统的基本原理的基础上,从体系结构、工作原理两个方面分析了Snort入侵检测系统,并介绍了怎样根据自己的网络环境,编写规则来保护网络的安全。 With the continuous development of Internet, intrusion detection system has become one of the important components of computer network security system. Based on the introduction of the basic principle of intrusion detection system, this paper analyzes Snort intrusion detection system from two aspects of architecture and working principle, and introduces how to write rules to protect network security according to your own network environment.