{"id":94999,"date":"2020-09-24T13:42:02","date_gmt":"2020-09-24T11:42:02","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/kandidat-v-relizy-sistemy-obnaruzheniya-atak-snort-3"},"modified":"2020-09-24T13:42:02","modified_gmt":"2020-09-24T11:42:02","slug":"kandidat-v-relizy-sistemy-obnaruzheniya-atak-snort-3","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/kandidat-v-relizy-sistemy-obnaruzheniya-atak-snort-3","title":{"rendered":"Kandidaat r\u00fcnnakute avastamise s\u00fcsteemi Snort 3 v\u00e4ljaandele","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Ettev\u00f5te Cisco <noindex><a rel=\"nofollow\" href=\"https:\/\/blog.snort.org\/2020\/09\/official-snort-3-release-candidate.html\">teatas<\/a><\/noindex> kandidaadi v\u00e4ljaande koostamisest t\u00e4iesti \u00fcmber t\u00f6\u00f6tatud r\u00fcnnakute v\u00e4ltimise s\u00fcsteemis <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/snort3\/snort3\">Snort 3<\/a><\/noindex>, tuntud ka kui projekt Snort++, mille kallal on t\u00f6\u00f6d tehtud katkestustega alates 2005. aastast. Stabiilne v\u00e4ljaanne on plaanitud avaldada j\u00e4rgmise kuu jooksul.<\/p>\n<p>Snort 3 haru on t\u00e4ielikult \u00fcmber m\u00f5testatud toote kontseptsioon ja arhitektuur. Peamised arengusuunad Snort 3-s: seadistamise ja k\u00e4ivitamise lihtsustamine, konfigureerimise automatiseerimine, reeglite koostamise keele lihtsustamine, k\u00f5igi protokollide automaatne m\u00e4\u00e4ramine, k\u00e4surea haldamise jaoks m\u00f5eldud liidese pakkumine, aktiivne mitme p\u00f5imimise rakendamine, kus erinevad t\u00f6\u00f6tlejad p\u00e4\u00e4sevad juurde \u00fchele konfiguratsioonile. <\/p>\n<p>Tehtud on mitmeid olulisi uuendusi:<\/p>\n<ul>\n<li class=\"l\"> On toimunud \u00fcleminek uuele konfigureerimiss\u00fcsteemile, mis pakub lihtsustatud s\u00fcntaksit ja v\u00f5imaldab kasutada skripte seadete d\u00fcnaamiliseks loomiseks. Konfiguratsioonifailide t\u00f6\u00f6tlemiseks kasutatakse LuaJIT-i. Pakutakse LuaJIT-p\u00f5hiseid pluginaid, mis rakendavad t\u00e4iendavate v\u00f5imaluste reeglite ja logimis\u00fcsteemi jaoks;\n<\/li>\n<li class=\"l\"> R\u00fcnnakute tuvastamise mootor on moderniseeritud, reeglid on ajakohastatud, reeglites on lisatud v\u00f5imalus siduda puhver (sticky buffers). Kasutusele on v\u00f5etud Hyperscani otsingumootor, mis v\u00f5imaldab reeglites kasutada kiireid ja t\u00e4psemaid mustreid, mis p\u00f5hinevad regulaarsetel v\u00e4ljenditel;\n<\/li>\n<li class=\"l\"> On lisatud uus HTTP introspektsioonire\u017eiim, mis arvestab sessiooni olekut ja katab 99% katsetussarjaga toetatud olukordadest <noindex><a rel=\"nofollow\" href=\"https:\/\/noxxi.de\/research\/http-evader.html\">HTTP Evader<\/a><\/noindex>. On lisatud HTTP\/2 liikluse inspekteerimise s\u00fcsteem;\n<\/li>\n<li class=\"l\"> Pakettide s\u00fcgava inspekteerimise re\u017eiimi j\u00f5udlust on oluliselt suurendatud. Lisatud on mitme p\u00f6ime t\u00f6\u00f6tlemise v\u00f5imalus, mis lubab samal ajal mitme pakettide t\u00f6\u00f6tleja l\u00f5ime t\u00e4ita ja tagab lineaarse skaleeritavuse s\u00f5ltuvalt CPU tuumade arvust;\n<\/li>\n<li class=\"l\"> On rakendatud \u00fchine konfiguratsioonihoidla ja atribuutide tabel, mida jagavad erinevad alams\u00fcsteemid, mis on v\u00f5imaldanud m\u00e4rgatavalt v\u00e4hendada m\u00e4lutarbimist t\u00e4nu teabe dubleerimise k\u00f5rvaldamisele.\n<\/li>\n<li class=\"l\"> Uus s\u00fcndmuste logimise s\u00fcsteem, mis kasutab JSON formaati ja on lihtsasti integreeritav v\u00e4listesse platvormidesse, nagu Elastic Stack;\n<\/li>\n<li class=\"l\"> \u00dcleminek modulaarsesse arhitektuuri, v\u00f5imaldades funktsionaalsuse laiendamist pluginate kaudu ning v\u00f5tmes\u00fcsteemide teostamist vahetatavate plugidena. Snort 3 jaoks on praeguseks loodud juba mitu sada pluginat, mis katab erinevaid kasutusvaldkondi, n\u00e4iteks omade koodekite, introspektsioonire\u017eiimide, logimismeetodite, tegevuste ja reeglite valikute lisamine;\n<\/li>\n<li class=\"l\"> T\u00f6\u00f6keskkonnas t\u00f6\u00f6tavate teenuste automaatne m\u00e4\u00e4ramine, mis vabastab vajadusest k\u00e4sitsi m\u00e4rkida aktiivseid v\u00f5rgu porte.\n<li class=\"l\"> Lisatud tugi failidele, mis v\u00f5imaldab kiiresti seadistusi \u00fcle kirjutada v\u00f5rreldes vaikeseadetega. Seadistamise lihtsustamiseks on l\u00f5petatud snort_config.lua ja SNORT_LUA_PATH kasutamine.<br \/>\nLisatud tugi seadistuste koheseks uuendamiseks;<\/p>\n<\/li>\n<li class=\"l\"> Koodis on tagatud C++14 standardis m\u00e4\u00e4ratud C++ konstruktsioonide kasutamise v\u00f5imalus (kompilaator peab toetama C++14);\n<\/li>\n<li class=\"l\"> Lisatud uus VXLAN t\u00f6\u00f6tleja;\n<\/li>\n<li class=\"l\"> Parandatud sisu t\u00fc\u00fcpide otsing, kasutades v\u00e4rskendatud algoritmide alternatiivseid teostusi <noindex><a rel=\"nofollow\" href=\"https:\/\/ru.wikipedia.org\/wiki\/%D0%90%D0%BB%D0%B3%D0%BE%D1%80%D0%B8%D1%82%D0%BC_%D0%91%D0%BE%D0%B9%D0%B5%D1%80%D0%B0_%E2%80%94_%D0%9C%D1%83%D1%80%D0%B0\">Boyer-Moore<\/a><\/noindex> ja <noindex><a rel=\"nofollow\" href=\"https:\/\/www.hyperscan.io\/\">Hyperscan<\/a><\/noindex>;\n<\/li>\n<li class=\"l\"> Reeglite kogumitute kompaktiivseks k\u00e4ivitamiseks on kiirus suurenenud mitme teema kasutamise kaudu;\n<\/li>\n<li class=\"l\"> Lisatud uus logimise mehhanism;\n<\/li>\n<li class=\"l\"> Lisatud RNA (reaalajas v\u00f5rgu teadlikkuse) inspektsioonis\u00fcsteem, mis kogub teavet v\u00f5rku k\u00e4ttesaadavate ressursside, hostide, rakenduste ja teenuste kohta.\n<\/li>\n<\/ul>\n<p><noindex><a rel=\"nofollow\" name=\"link\"><\/a><\/noindex><\/p>\n<p>Allikas: <a \ncontent=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=53770\">opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Cisco \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0438 \u043a\u0430\u043d\u0434\u0438\u0434\u0430\u0442\u0430 \u0432 \u0440\u0435\u043b\u0438\u0437\u044b \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u043f\u0435\u0440\u0435\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a Snort 3, \u0442\u0430\u043a\u0436\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e\u0439 \u043a\u0430\u043a \u043f\u0440\u043e\u0435\u043a\u0442 Snort++, \u0440\u0430\u0431\u043e\u0442\u0430 \u043d\u0430\u0434 \u043a\u043e\u0442\u043e\u0440\u044b\u043c \u0441 \u043f\u0435\u0440\u0435\u0440\u044b\u0432\u0430\u043c\u0438 \u0432\u0435\u0434\u0451\u0442\u0441\u044f \u0435\u0449\u0451 \u0441 2005 \u0433\u043e\u0434\u0430. \u0421\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u044b\u0439 \u0440\u0435\u043b\u0438\u0437 \u043f\u043b\u0430\u043d\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u0442\u044c \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 \u043c\u0435\u0441\u044f\u0446\u0430. \u0412 \u0432\u0435\u0442\u043a\u0435 Snort 3 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u043f\u0435\u0440\u0435\u043e\u0441\u043c\u044b\u0441\u043b\u0435\u043d\u0430 \u043a\u043e\u043d\u0446\u0435\u043f\u0446\u0438\u044f \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430 \u0438 \u043f\u0435\u0440\u0435\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u0430 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u0430. \u0421\u0440\u0435\u0434\u0438 \u043a\u043b\u044e\u0447\u0435\u0432\u044b\u0445 \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u0440\u0430\u0437\u0432\u0438\u0442\u0438\u044f Snort 3: \u0443\u043f\u0440\u043e\u0449\u0435\u043d\u0438\u0435 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-94999","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.1.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Cisco \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0438 \u043a\u0430\u043d\u0434\u0438\u0434\u0430\u0442\u0430 \u0432 \u0440\u0435\u043b\u0438\u0437\u044b \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u043f\u0435\u0440\u0435\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/et\/blog\/news\/kandidat-v-relizy-sistemy-obnaruzheniya-atak-snort-3\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.1.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"et_EE\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u041a\u0430\u043d\u0434\u0438\u0434\u0430\u0442 \u0432 \u0440\u0435\u043b\u0438\u0437\u044b \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a Snort 3 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Cisco \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0438 \u043a\u0430\u043d\u0434\u0438\u0434\u0430\u0442\u0430 \u0432 \u0440\u0435\u043b\u0438\u0437\u044b \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u043f\u0435\u0440\u0435\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/et\/blog\/news\/kandidat-v-relizy-sistemy-obnaruzheniya-atak-snort-3\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-09-24T11:42:02+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-09-24T11:42:02+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Snort 3 r\u00fcndeavastuss\u00fcsteemi v\u00e4ljaandmise kandidaat | ProHoster","description":"Cisco kuulutas v\u00e4lja t\u00e4ielikult rekonstrueeritud s\u00fcsteemi v\u00e4ljaandmiseks kandidaadi.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/kandidat-v-relizy-sistemy-obnaruzheniya-atak-snort-3","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041a\u0430\u043d\u0434\u0438\u0434\u0430\u0442 \u0432 \u0440\u0435\u043b\u0438\u0437\u044b \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a Snort 3 | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Cisco \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0438 \u043a\u0430\u043d\u0434\u0438\u0434\u0430\u0442\u0430 \u0432 \u0440\u0435\u043b\u0438\u0437\u044b \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u043f\u0435\u0440\u0435\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/kandidat-v-relizy-sistemy-obnaruzheniya-atak-snort-3","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-09-24T11:42:02+00:00","article:modified_time":"2020-09-24T11:42:02+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"94999","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 11:14:44","updated":"2022-10-03 07:51:15","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/94999","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=94999"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/94999\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=94999"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=94999"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=94999"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}