{"id":79171,"date":"2020-04-25T01:42:02","date_gmt":"2020-04-24T23:42:02","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/finalnyj-beta-vypusk-sistemy-obnaruzheniya-atak-snort-3"},"modified":"2020-04-25T01:42:02","modified_gmt":"2020-04-24T23:42:02","slug":"finalnyj-beta-vypusk-sistemy-obnaruzheniya-atak-snort-3","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/finalnyj-beta-vypusk-sistemy-obnaruzheniya-atak-snort-3","title":{"rendered":"Snort 3 r\u00fcnnakute avastamise s\u00fcsteemi l\u00f5pp-beeta v\u00e4ljaanne.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Ettev\u00f5te Cisco <noindex><a rel=\"nofollow\" href=\"https:\/\/blog.snort.org\/2020\/04\/snort-beta-available-now.html\">esitles<\/a><\/noindex> l\u00f5ppversioon t\u00e4ielikult \u00fcmber t\u00f6\u00f6tatud r\u00fcnnakute t\u00f5kestamise s\u00fcsteemist <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/snort3\/snort3\">Snort 3<\/a><\/noindex>, tuntud ka kui projekt Snort++, mille kallal on t\u00f6\u00f6tatud katkendlikult alates 2005. aastast. Selle aasta l\u00f5pus on plaanis avaldada kandidaat versioonide v\u00e4ljaandmiseks.<\/p>\n<p>Uues versioonis on toote kontseptsioon t\u00e4ielikult \u00fcmber m\u00f5testatud ning arhitektuur on \u00fcmber t\u00f6\u00f6tatud. Oluliste suundade hulgas, millele r\u00f5hku pandi uue versiooni ettevalmistamisel, on Snorti seadistamise ja k\u00e4ivitamise lihtsustamine, konfiguratsiooni automatiseerimine, reeglite koostamise keele lihtsustamine, k\u00f5ikide protokollide automaatne tuvastamine, k\u00e4surealt juhtimise kasutatavuse tagamine ning aktiivne t\u00f6\u00f6simulaatorite rakendamine \u00fchise konfigureerimise juures. <\/p>\n<p>Tehtud on mitmeid olulisi uuendusi:<\/p>\n<ul>\n<li class=\"l\"> On toimunud \u00fcleminek uuele konfigureerimiss\u00fcsteemile, mis pakub lihtsustatud s\u00fcntaksit ja v\u00f5imaldab kasutada skripte seadete d\u00fcnaamiliseks loomiseks. Konfiguratsioonifailide t\u00f6\u00f6tlemiseks kasutatakse LuaJIT-i. Pakutakse LuaJIT-p\u00f5hiseid pluginaid, mis rakendavad t\u00e4iendavate v\u00f5imaluste reeglite ja logimis\u00fcsteemi jaoks;\n<\/li>\n<li class=\"l\"> R\u00fcnnakute tuvastamise mootor on moderniseeritud, reeglid on ajakohastatud, reeglites on lisatud v\u00f5imalus siduda puhver (sticky buffers). Kasutusele on v\u00f5etud Hyperscani otsingumootor, mis v\u00f5imaldab reeglites kasutada kiireid ja t\u00e4psemaid mustreid, mis p\u00f5hinevad regulaarsetel v\u00e4ljenditel;\n<\/li>\n<li class=\"l\"> On lisatud uus HTTP introspektsioonire\u017eiim, mis arvestab sessiooni olekut ja katab 99% katsetussarjaga toetatud olukordadest <noindex><a rel=\"nofollow\" href=\"https:\/\/noxxi.de\/research\/http-evader.html\">HTTP Evader<\/a><\/noindex>. Arendusj\u00e4rgus on kood HTTP\/2 toe toetamiseks;\n<\/li>\n<li class=\"l\"> Pakettide s\u00fcgava inspekteerimise re\u017eiimi j\u00f5udlust on oluliselt suurendatud. Lisatud on mitme p\u00f6ime t\u00f6\u00f6tlemise v\u00f5imalus, mis lubab samal ajal mitme pakettide t\u00f6\u00f6tleja l\u00f5ime t\u00e4ita ja tagab lineaarse skaleeritavuse s\u00f5ltuvalt CPU tuumade arvust;\n<\/li>\n<li class=\"l\"> On rakendatud \u00fchine konfiguratsioonihoidla ja atribuutide tabel, mida jagavad erinevad alams\u00fcsteemid, mis on v\u00f5imaldanud m\u00e4rgatavalt v\u00e4hendada m\u00e4lutarbimist t\u00e4nu teabe dubleerimise k\u00f5rvaldamisele.\n<\/li>\n<li class=\"l\"> Uus s\u00fcndmuste logimise s\u00fcsteem, mis kasutab JSON formaati ja on lihtsasti integreeritav v\u00e4listesse platvormidesse, nagu Elastic Stack;\n<\/li>\n<li class=\"l\"> \u00dcleminek modulaarsesse arhitektuuri, v\u00f5imaldades funktsionaalsuse laiendamist pluginate kaudu ning v\u00f5tmes\u00fcsteemide teostamist vahetatavate plugidena. Snort 3 jaoks on praeguseks loodud juba mitu sada pluginat, mis katab erinevaid kasutusvaldkondi, n\u00e4iteks omade koodekite, introspektsioonire\u017eiimide, logimismeetodite, tegevuste ja reeglite valikute lisamine;\n<\/li>\n<li class=\"l\"> T\u00f6\u00f6keskkonnas t\u00f6\u00f6tavate teenuste automaatne m\u00e4\u00e4ramine, mis vabastab vajadusest k\u00e4sitsi m\u00e4rkida aktiivseid v\u00f5rgu porte.\n<\/ul>\n<p>Muutused v\u00f5rreldes eelmise testversiooniga, mis avaldati 2018. aastal:<\/p>\n<ul>\n<li class=\"l\"> Lisatud tugi failidele kiireks konfiguratsiooni \u00fclekirjutamiseks, v\u00f5rreldes vaikeseadetega;\n<li class=\"l\"> Koodis on tagatud C++14 standardis m\u00e4\u00e4ratud C++ konstruktsioonide kasutamise v\u00f5imalus (kompilaator peab toetama C++14);\n<li class=\"l\"> Lisatud uus VXLAN t\u00f6\u00f6tleja;\n<li class=\"l\"> Parandatud sisu t\u00fc\u00fcpide otsing, kasutades v\u00e4rskendatud algoritmide alternatiivseid teostusi <noindex><a rel=\"nofollow\" href=\"https:\/\/ru.wikipedia.org\/wiki\/%D0%90%D0%BB%D0%B3%D0%BE%D1%80%D0%B8%D1%82%D0%BC_%D0%91%D0%BE%D0%B9%D0%B5%D1%80%D0%B0_%E2%80%94_%D0%9C%D1%83%D1%80%D0%B0\">Boyer-Moore<\/a><\/noindex> ja <noindex><a rel=\"nofollow\" href=\"https:\/\/www.hyperscan.io\/\">Hyperscan<\/a><\/noindex>;\n<li class=\"l\"> Peaaegu valmis on s\u00fcsteem HTTP\/2 liikluse j\u00e4lgimiseks;\n<li class=\"l\"> Reeglite kogumitute kompaktiivseks k\u00e4ivitamiseks on kiirus suurenenud mitme teema kasutamise kaudu;\n<li class=\"l\"> Lisatud uus logimise mehhanism;\n<li class=\"l\"> Parandatud on Lua vigade tuvastamist ja optimeeritud on valgete nimekirjade t\u00f6\u00f6;\n<li class=\"l\"> Tehtud on muudatused, mis v\u00f5imaldavad seadistuste kuumlaadimist;\n<li class=\"l\"> Lisatud on RNA (Reaalajas V\u00f5rguteadlikkuse) j\u00e4lgimisseade, mis kogub teavet v\u00f5rgu ressursside, hostide, rakenduste ja teenuste kohta;\n<li class=\"l\"> Seadistamise lihtsustamiseks on l\u00f5petatud snort_config.lua ja SNORT_LUA_PATH kasutamine.\n<\/ul>\n<p><noindex><a rel=\"nofollow\" name=\"link\"><\/a><\/noindex><\/p>\n<p>Allikas: <a \ncontent=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=52799\">opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Cisco \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0444\u0438\u043d\u0430\u043b\u044c\u043d\u0443\u044e \u0431\u0435\u0442\u0430-\u0432\u0435\u0440\u0441\u0438\u044e \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u043f\u0435\u0440\u0435\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a Snort 3, \u0442\u0430\u043a\u0436\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e\u0439 \u043a\u0430\u043a \u043f\u0440\u043e\u0435\u043a\u0442 Snort++, \u0440\u0430\u0431\u043e\u0442\u0430 \u043d\u0430\u0434 \u043a\u043e\u0442\u043e\u0440\u044b\u043c \u0441 \u043f\u0435\u0440\u0435\u0440\u044b\u0432\u0430\u043c\u0438 \u0432\u0435\u0434\u0451\u0442\u0441\u044f \u0435\u0449\u0451 \u0441 2005 \u0433\u043e\u0434\u0430. \u041f\u043e\u0437\u0434\u043d\u0435\u0435 \u0432 \u044d\u0442\u043e\u043c \u0433\u043e\u0434\u0443 \u043f\u043b\u0430\u043d\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u0442\u044c \u043a\u0430\u043d\u0434\u0438\u0434\u0430\u0442 \u0432 \u0440\u0435\u043b\u0438\u0437\u044b. \u0412 \u043d\u043e\u0432\u043e\u0439 \u0432\u0435\u0442\u043a\u0435 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u043f\u0435\u0440\u0435\u043e\u0441\u043c\u044b\u0441\u043b\u0435\u043d\u0430 \u043a\u043e\u043d\u0446\u0435\u043f\u0446\u0438\u044f \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430 \u0438 \u043f\u0435\u0440\u0435\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u0430 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u0430. \u0418\u0437 \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0431\u044b\u043b \u0441\u0434\u0435\u043b\u0430\u043d \u0430\u043a\u0446\u0435\u043d\u0442 \u043f\u0440\u0438 \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043a\u0435 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-79171","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.1.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Cisco \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0444\u0438\u043d\u0430\u043b\u044c\u043d\u0443\u044e \u0431\u0435\u0442\u0430-\u0432\u0435\u0440\u0441\u0438\u044e \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u043f\u0435\u0440\u0435\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/et\/blog\/news\/finalnyj-beta-vypusk-sistemy-obnaruzheniya-atak-snort-3\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.1.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"et_EE\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0424\u0438\u043d\u0430\u043b\u044c\u043d\u044b\u0439 \u0431\u0435\u0442\u0430-\u0432\u044b\u043f\u0443\u0441\u043a \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a Snort 3 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Cisco \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0444\u0438\u043d\u0430\u043b\u044c\u043d\u0443\u044e \u0431\u0435\u0442\u0430-\u0432\u0435\u0440\u0441\u0438\u044e \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u043f\u0435\u0440\u0435\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/et\/blog\/news\/finalnyj-beta-vypusk-sistemy-obnaruzheniya-atak-snort-3\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-04-24T23:42:02+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-04-24T23:42:02+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Snort 3 r\u00fcnnakute tuvastamise s\u00fcsteemi l\u00f5plik beetaversioon | ProHoster","description":"Ettev\u00f5te Cisco tutvustas t\u00e4iustatud r\u00fcnnakute ennetamise s\u00fcsteemi l\u00f5ppversiooni beetaversiooni.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/finalnyj-beta-vypusk-sistemy-obnaruzheniya-atak-snort-3","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0424\u0438\u043d\u0430\u043b\u044c\u043d\u044b\u0439 \u0431\u0435\u0442\u0430-\u0432\u044b\u043f\u0443\u0441\u043a \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a Snort 3 | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Cisco \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0444\u0438\u043d\u0430\u043b\u044c\u043d\u0443\u044e \u0431\u0435\u0442\u0430-\u0432\u0435\u0440\u0441\u0438\u044e \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u043f\u0435\u0440\u0435\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a.","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/finalnyj-beta-vypusk-sistemy-obnaruzheniya-atak-snort-3","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-04-24T23:42:02+00:00","article:modified_time":"2020-04-24T23:42:02+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"79171","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 16:43:23","updated":"2022-10-05 19:38:44","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/79171","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=79171"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/79171\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=79171"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=79171"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=79171"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}