{"id":79171,"date":"2020-04-25T01:42:02","date_gmt":"2020-04-24T23:42:02","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/finalnyj-beta-vypusk-sistemy-obnaruzheniya-atak-snort-3"},"modified":"2020-04-25T01:42:02","modified_gmt":"2020-04-24T23:42:02","slug":"finalnyj-beta-vypusk-sistemy-obnaruzheniya-atak-snort-3","status":"publish","type":"post","link":"https:\/\/prohoster.info\/fr\/blog\/news\/finalnyj-beta-vypusk-sistemy-obnaruzheniya-atak-snort-3","title":{"rendered":"Sortie de la version b\u00eata finale du syst\u00e8me de d\u00e9tection des attaques Snort 3.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Soci\u00e9t\u00e9 Cisco <noindex><a rel=\"nofollow\" href=\"https:\/\/blog.snort.org\/2020\/04\/snort-beta-available-now.html\">pr\u00e9sent\u00e9e<\/a><\/noindex> la version b\u00eata finale du syst\u00e8me enti\u00e8rement repens\u00e9 de pr\u00e9vention des attaques <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/snort3\/snort3\">Snort 3<\/a><\/noindex>, \u00e9galement connu sous le nom de projet Snort++, dont le d\u00e9veloppement a \u00e9t\u00e9 fait avec des pauses depuis 2005. Une version candidate est pr\u00e9vue pour publication plus tard cette ann\u00e9e.<\/p>\n<p>Dans cette nouvelle branche, le concept du produit a \u00e9t\u00e9 enti\u00e8rement repens\u00e9 et l'architecture retravaill\u00e9e. Parmi les axes sur lesquels la nouvelle branche a mis l'accent, on note la simplification de la configuration et du lancement de Snort, l'automatisation de la configuration, la simplification du langage de construction des r\u00e8gles, la d\u00e9tection automatique de tous les protocoles, la fourniture d'une interface de gestion en ligne de commande, et l'application active du multi-threading avec un acc\u00e8s partag\u00e9 aux diff\u00e9rents gestionnaires \u00e0 une seule configuration. <\/p>\n<p>Les innovations significatives suivantes ont \u00e9t\u00e9 mises en \u0153uvre :<\/p>\n<ul>\n<li class=\"l\"> Une nouvelle syst\u00e8me de configuration a \u00e9t\u00e9 adopt\u00e9e, offrant une syntaxe simplifi\u00e9e et permettant d\u2019utiliser des scripts pour la formation dynamique des param\u00e8tres. LuaJIT est utilis\u00e9 pour traiter les fichiers de configuration. Des plugins bas\u00e9s sur LuaJIT sont fournis, impl\u00e9mentant des options suppl\u00e9mentaires pour les r\u00e8gles et le syst\u00e8me de journalisation;\n<\/li>\n<li class=\"l\"> Le moteur de d\u00e9tection des attaques a \u00e9t\u00e9 modernis\u00e9, les r\u00e8gles actualis\u00e9es, et la possibilit\u00e9 de lier des tampons dans les r\u00e8gles (sticky buffers) a \u00e9t\u00e9 ajout\u00e9e. Le moteur de recherche Hyperscan a \u00e9t\u00e9 utilis\u00e9, permettant d'utiliser des motifs bas\u00e9s sur des expressions r\u00e9guli\u00e8res plus rapides et plus pr\u00e9cis dans les r\u00e8gles;\n<\/li>\n<li class=\"l\"> Un nouveau mode d'introspection pour HTTP a \u00e9t\u00e9 ajout\u00e9, tenant compte de l'\u00e9tat de la session et couvrant 99% des situations prises en charge par l'ensemble de tests <noindex><a rel=\"nofollow\" href=\"https:\/\/noxxi.de\/research\/http-evader.html\">HTTP Evader<\/a><\/noindex>. Un code pour la prise en charge de HTTP\/2 est en cours de d\u00e9veloppement;\n<\/li>\n<li class=\"l\"> La performance du mode d'inspection profonde des paquets a \u00e9t\u00e9 consid\u00e9rablement augment\u00e9e. La possibilit\u00e9 de traitement multi-thread des paquets a \u00e9t\u00e9 ajout\u00e9e, permettant l'ex\u00e9cution simultan\u00e9e de plusieurs threads avec des gestionnaires de paquets, assurant une scalabilit\u00e9 lin\u00e9aire en fonction du nombre de c\u0153urs du CPU;\n<\/li>\n<li class=\"l\"> Un stockage de configuration commun et des tables d'attributs ont \u00e9t\u00e9 mis en \u0153uvre, utilis\u00e9s conjointement dans diff\u00e9rents sous-syst\u00e8mes, ce qui a permis de r\u00e9duire consid\u00e9rablement la consommation de m\u00e9moire en \u00e9liminant la duplication d'informations;\n<\/li>\n<li class=\"l\"> Un nouveau syst\u00e8me de journalisation des \u00e9v\u00e9nements utilisant le format JSON et facilement int\u00e9gr\u00e9 \u00e0 des plateformes externes telles que Elastic Stack ;\n<\/li>\n<li class=\"l\"> Passage \u00e0 une architecture modulaire, possibilit\u00e9 d'\u00e9tendre les fonctionnalit\u00e9s via l'ajout de plugins et mise en \u0153uvre des sous-syst\u00e8mes cl\u00e9s sous forme de plugins rempla\u00e7ables. Actuellement, plusieurs centaines de plugins sont d\u00e9j\u00e0 disponibles pour Snort 3, couvrant divers cas d'utilisation, permettant par exemple d'ajouter des codecs personnalis\u00e9s, des modes d'introspection, des m\u00e9thodes de journalisation, des actions et des options dans les r\u00e8gles ;\n<\/li>\n<li class=\"l\"> D\u00e9tection automatique des services en cours, \u00e9liminant le besoin de sp\u00e9cifier manuellement les ports r\u00e9seau actifs.\n<\/ul>\n<p>Modifications par rapport \u00e0 la derni\u00e8re version de test publi\u00e9e en 2018 :<\/p>\n<ul>\n<li class=\"l\"> Ajout de la prise en charge des fichiers pour un remplacement rapide des param\u00e8tres par rapport \u00e0 la configuration par d\u00e9faut ;\n<li class=\"l\"> Le code permet l'utilisation de constructions C++ d\u00e9finies dans la norme C++14 (un compilateur prenant en charge C++14 est requis pour la compilation) ;\n<li class=\"l\"> Ajout d'un nouveau gestionnaire VXLAN ;\n<li class=\"l\"> Am\u00e9lioration de la recherche de types de contenu par le contenu \u00e0 l'aide de mises \u00e0 jour des impl\u00e9mentations alternatives des algorithmes <noindex><a rel=\"nofollow\" href=\"https:\/\/ru.wikipedia.org\/wiki\/%D0%90%D0%BB%D0%B3%D0%BE%D1%80%D0%B8%D1%82%D0%BC_%D0%91%D0%BE%D0%B9%D0%B5%D1%80%D0%B0_%E2%80%94_%D0%9C%D1%83%D1%80%D0%B0\">Boyer-Moore<\/a><\/noindex> et <noindex><a rel=\"nofollow\" href=\"https:\/\/www.hyperscan.io\/\">Hyperscan<\/a><\/noindex>;\n<li class=\"l\"> Le syst\u00e8me d'inspection du trafic HTTP\/2 est presque complet ;\n<li class=\"l\"> D\u00e9marrage acc\u00e9l\u00e9r\u00e9 gr\u00e2ce \u00e0 l'utilisation de plusieurs threads pour compiler des groupes de r\u00e8gles ;\n<li class=\"l\"> Ajout d'un nouveau m\u00e9canisme de journalisation ;\n<li class=\"l\"> Am\u00e9lioration de la d\u00e9tection des erreurs Lua et optimisation du fonctionnement des listes blanches ;\n<li class=\"l\"> Modifications apport\u00e9es pour permettre le rechargement dynamique des param\u00e8tres ;\n<li class=\"l\"> Ajout d'un syst\u00e8me d'inspection RNA (Real-time Network Awareness), collectant des informations sur les ressources, h\u00f4tes, applications et services disponibles sur le r\u00e9seau ;\n<li class=\"l\"> Pour simplifier la configuration, l'utilisation de snort_config.lua et de SNORT_LUA_PATH a \u00e9t\u00e9 abandonn\u00e9e.\n<\/ul>\n<p><noindex><a rel=\"nofollow\" name=\"link\"><\/a><\/noindex><\/p>\n<p>Source : <a \ncontent=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=52799\">opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Cisco \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0444\u0438\u043d\u0430\u043b\u044c\u043d\u0443\u044e \u0431\u0435\u0442\u0430-\u0432\u0435\u0440\u0441\u0438\u044e \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u043f\u0435\u0440\u0435\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a Snort 3, \u0442\u0430\u043a\u0436\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e\u0439 \u043a\u0430\u043a \u043f\u0440\u043e\u0435\u043a\u0442 Snort++, \u0440\u0430\u0431\u043e\u0442\u0430 \u043d\u0430\u0434 \u043a\u043e\u0442\u043e\u0440\u044b\u043c \u0441 \u043f\u0435\u0440\u0435\u0440\u044b\u0432\u0430\u043c\u0438 \u0432\u0435\u0434\u0451\u0442\u0441\u044f \u0435\u0449\u0451 \u0441 2005 \u0433\u043e\u0434\u0430. \u041f\u043e\u0437\u0434\u043d\u0435\u0435 \u0432 \u044d\u0442\u043e\u043c \u0433\u043e\u0434\u0443 \u043f\u043b\u0430\u043d\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u0442\u044c \u043a\u0430\u043d\u0434\u0438\u0434\u0430\u0442 \u0432 \u0440\u0435\u043b\u0438\u0437\u044b. \u0412 \u043d\u043e\u0432\u043e\u0439 \u0432\u0435\u0442\u043a\u0435 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u043f\u0435\u0440\u0435\u043e\u0441\u043c\u044b\u0441\u043b\u0435\u043d\u0430 \u043a\u043e\u043d\u0446\u0435\u043f\u0446\u0438\u044f \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430 \u0438 \u043f\u0435\u0440\u0435\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u0430 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u0430. \u0418\u0437 \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0431\u044b\u043b \u0441\u0434\u0435\u043b\u0430\u043d \u0430\u043a\u0446\u0435\u043d\u0442 \u043f\u0440\u0438 \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043a\u0435 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-79171","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Cisco \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0444\u0438\u043d\u0430\u043b\u044c\u043d\u0443\u044e \u0431\u0435\u0442\u0430-\u0432\u0435\u0440\u0441\u0438\u044e \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u043f\u0435\u0440\u0435\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/fr\/blog\/news\/finalnyj-beta-vypusk-sistemy-obnaruzheniya-atak-snort-3\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2\" \/>\n\t\t<meta property=\"og:locale\" content=\"fr_FR\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0424\u0438\u043d\u0430\u043b\u044c\u043d\u044b\u0439 \u0431\u0435\u0442\u0430-\u0432\u044b\u043f\u0443\u0441\u043a \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a Snort 3 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Cisco \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0444\u0438\u043d\u0430\u043b\u044c\u043d\u0443\u044e \u0431\u0435\u0442\u0430-\u0432\u0435\u0440\u0441\u0438\u044e \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u043f\u0435\u0440\u0435\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/fr\/blog\/news\/finalnyj-beta-vypusk-sistemy-obnaruzheniya-atak-snort-3\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-04-24T23:42:02+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-04-24T23:42:02+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Version b\u00eata finale du syst\u00e8me de d\u00e9tection des attaques Snort 3 | ProHoster","description":"Cisco a pr\u00e9sent\u00e9 la version b\u00eata finale d'un syst\u00e8me de pr\u00e9vention des attaques compl\u00e8tement repens\u00e9.","canonical_url":"https:\/\/prohoster.info\/fr\/blog\/news\/finalnyj-beta-vypusk-sistemy-obnaruzheniya-atak-snort-3","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"fr_FR","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0424\u0438\u043d\u0430\u043b\u044c\u043d\u044b\u0439 \u0431\u0435\u0442\u0430-\u0432\u044b\u043f\u0443\u0441\u043a \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a Snort 3 | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Cisco \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0444\u0438\u043d\u0430\u043b\u044c\u043d\u0443\u044e \u0431\u0435\u0442\u0430-\u0432\u0435\u0440\u0441\u0438\u044e \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u043f\u0435\u0440\u0435\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a.","og:url":"https:\/\/prohoster.info\/fr\/blog\/news\/finalnyj-beta-vypusk-sistemy-obnaruzheniya-atak-snort-3","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-04-24T23:42:02+00:00","article:modified_time":"2020-04-24T23:42:02+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"79171","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 16:43:23","updated":"2022-10-05 19:38:44","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/79171","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/comments?post=79171"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/79171\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/media?parent=79171"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/categories?post=79171"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/tags?post=79171"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}