With the advent of the information age, the development of enterprises are also increasingly showing industrial diversification, the structure of the distribution, management information features. Computer network technology continues to improve, expanding the scope of information management, both internal departments, suppliers or outside the enterprise, affiliates and outgoing personnel, are required to establish between the corporate headquarters with a fast, secure and stable network communication environment. How to establish secure communication with the external environment and the internal network between the network environment, remote access to enterprise branch offices outside the internal network resources, a lot of companies in the current building information network problems to be solved
Keyword: VPN , network , tunnel , safely，IPSec，GRE
With the expansion of the openness and pupularization and sharing and interconnection of computer network technology . Network security has become an international problem, every year The aggregate loss that has been caused by the damage and destruction of the security system of computer network has amounted to be as much as ten billion USD .Confronting with the increasing security threat, One more effective technology is needed to cope with these problems and the intrusion detecting system can provide such assistance for us .
As a kind of active security protective technology , Intrusion dectecting system provides the actual protection for the inner and outer attack by intercepting the attack and responding to the intrusion before damaging the network system . with thenetwork technology getting more and more strict and rigourous in its security properties , The intrustion detecting system can provide the comprehensive and complete service from the the stereo and longitudinal and latitudinal and multilayers aspects of the network security , which has become the best choice for the time being .
This test began with the introduction of the generalized situation of the intrusion detecting system, including its source, its categories, and its relevant products , and the problem existing for the present has been analyzed and its development trend has been generalized simply . The further study of the detailed inforamtion of Snort has been performed , including its features and construction and detecting procedures and so on , finally, How to install configuration of Snort IDS on the windowns has been introduced correspondily
纯手工翻译，希望满意并采纳，谢谢！
With the development of computer technology and network technology, network security issues, today has become one of the most attention to the problem of the network world Many factors, which endanger the safety of the network, they mainly attached to the various malware, including viruses and trojans is most general Internet users are familiar with. According to these harmful factors, network security technology rapid development, it also greatly improved the security of the network. Aiming at network security situation now, on the company's network information security are analyzed and put forward the improvement plan.
Keywords: physical security, intrusion detection, firewall, switch, router
In recent years, mobile Ad hoc networks as emerging - wireless communication network, gradually attracting attention of industry, become the focus of research. Ad Hoc network infrastructure support in no circumstances is flexible and convenient communications, the technology of mobile communication area expanded, with bright prospects. Ad Hoc networks in the military field application initially, along with the development of wireless network, Ad Hoc network in civil field also began to get develop. Mobile Ad hoc networks - do not need any wireless infrastructure support, node can be on any mobile networking, node can add or leave, network. Ad Hoc network also has netted speed, invulnerability self-healing capability advantages in military and civilian areas, get more and more widely.
Due to the mobile Ad hoc network using wireless channel, freedom, network structure, etc, the technical characteristics of Ad hoc network more easily to be tapped, denial of service attacks, which are hidden in the safe. To establish a secure network Ad Hoc - its intrusion detection and response technology necessary, has the vital significance.
Based on the Ad Hoc network characteristics to establish a new one packet basis of network structure. Based on the basic concept and the group of grouping is discussed, and according to the characteristics of the group, established the security model based on group, and expounds the basic concept, threshold certification group characteristics and threshold combining authentication technology to realize a wireless Ad hoc network group within the threshold of authentication security solutions.
Keywords: Ad Hoc networks, Network security strategy, Group, Threshold authentication
摘要
基于Web的漏洞占了很大一部分的安全漏洞的计算机网络。为了检测已知的基于网络的攻击，误用检测系统都配备了大量的签名。不幸地，很难跟上每日披露的网站相关的漏洞，此外，漏洞可介绍的安装特定的基于Web的应用。因此，误用检测系统应当 配合异常检测系统。
本文介绍了入侵检测系统，采用了一些不同的异常检测技术
侦测攻击网络服务器和基于Web的应用。该系统会分析客户查询，参考Serverside集团
计划和创建模式，范围广泛的不同特点，这些查询。例如，这些功能都
访问模式的服务器端程序或价值的个别参数的调用。特别是，利用
特定应用的表征援引参数允许系统进行重点分析和 生产数量减少的误报。
该系统会自动产生配置文件的参数与网络相关的应用程序（例如，长度和结构
参数）和查询之间的关系（例如，存取时间和顺序）从分析数据。因此，
可以部署在非常不同的应用环境，而不需要进行费时的调整和
配置。
