{"id":79171,"date":"2020-04-25T01:42:02","date_gmt":"2020-04-24T23:42:02","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/finalnyj-beta-vypusk-sistemy-obnaruzheniya-atak-snort-3"},"modified":"2020-04-25T01:42:02","modified_gmt":"2020-04-24T23:42:02","slug":"finalnyj-beta-vypusk-sistemy-obnaruzheniya-atak-snort-3","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sv\/blog\/news\/finalnyj-beta-vypusk-sistemy-obnaruzheniya-atak-snort-3","title":{"rendered":"Slutlig beta-version av Snort 3 attackdetekteringssystem","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>F\u00f6retaget Cisco <noindex><a rel=\"nofollow\" href=\"https:\/\/blog.snort.org\/2020\/04\/snort-beta-available-now.html\">har presenterat<\/a><\/noindex> den slutliga betaversionen av det helt omarbetade systemet f\u00f6r att f\u00f6rhindra attacker <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/snort3\/snort3\">Snort 3<\/a><\/noindex>, \u00e4ven k\u00e4nt som projektet Snort++, vars arbete p\u00e5g\u00e5tt med avbrott sedan 2005. En kandidat f\u00f6r release planeras att publiceras senare i \u00e5r.<\/p>\n<p>I den nya grenen har produktens koncept helt omdefinierats och arkitekturen har omarbetats. Bland de omr\u00e5den som har betonats i f\u00f6rberedelserna av den nya grenen m\u00e4rks f\u00f6renkling av installation och k\u00f6rning av Snort, automatisering av konfiguration, f\u00f6renkling av regelspr\u00e5ket, automatisk identifiering av alla protokoll, tillhandah\u00e5llande av en kommandoradsgr\u00e4nssnitt och aktiv till\u00e4mpning av flertr\u00e5dad bearbetning med delad \u00e5tkomst f\u00f6r olika hanterare till en gemensam konfiguration. <\/p>\n<p>F\u00f6ljande betydande nyheter har implementerats:<\/p>\n<ul>\n<li class=\"l\"> \u00d6verg\u00e5ng till ett nytt konfigurationssystem som erbjuder en f\u00f6renklad syntax och g\u00f6r det m\u00f6jligt att anv\u00e4nda skript f\u00f6r dynamisk konfiguration. LuaJIT anv\u00e4nds f\u00f6r att bearbeta konfigurationsfiler. Plugins baserade p\u00e5 LuaJIT tillhandah\u00e5lls med implementering av ytterligare alternativ f\u00f6r regler och loggning;\n<\/li>\n<li class=\"l\"> Angreppsdetekteringsmotorn har uppgraderats, reglerna har aktualiserats och m\u00f6jligheten att binda buffertar i reglerna (sticky buffers) har lagts till. Hyperscan-s\u00f6kmotorn anv\u00e4nds f\u00f6r att m\u00f6jligg\u00f6ra snabba och mer exakta m\u00f6nster i reglerna baserat p\u00e5 regulj\u00e4ra uttryck;\n<\/li>\n<li class=\"l\"> En ny introspektionsl\u00e4ge f\u00f6r HTTP har lagts till, som tar h\u00e4nsyn till sessionsstatus och t\u00e4cker 99% av situationerna som st\u00f6ds av testsviten. <noindex><a rel=\"nofollow\" href=\"https:\/\/noxxi.de\/research\/http-evader.html\">HTTP Evader<\/a><\/noindex>. Koden f\u00f6r st\u00f6d av HTTP\/2 \u00e4r under utveckling;\n<\/li>\n<li class=\"l\"> Prestandan f\u00f6r den djupa paketinspektionen har \u00f6kat v\u00e4sentligt. M\u00f6jligheten till flertr\u00e5dning av paketbearbetning har lagts till, vilket till\u00e5ter samtidig k\u00f6rning av flera tr\u00e5dar med paketprocessorer och ger linj\u00e4r skalbarhet beroende av antalet CPU-k\u00e4rnor;\n<\/li>\n<li class=\"l\"> Ett gemensamt konfigurationslagringssystem och attributtabeller har implementerats, som anv\u00e4nds gemensamt i olika delsystem, vilket har minskat minnesanv\u00e4ndningen avsev\u00e4rt genom att utesluta informationsduplicering;\n<\/li>\n<li class=\"l\"> Ett nytt h\u00e4ndelseloggingssystem, som anv\u00e4nder JSON-format och enkelt kan integreras med externa plattformar som Elastic Stack;\n<\/li>\n<li class=\"l\"> \u00d6verg\u00e5ng till modul\u00e4r arkitektur, med m\u00f6jlighet att ut\u00f6ka funktionaliteten genom att ansluta plugins och implementera nyckelsubsystem i form av utbytbara plugins. F\u00f6r n\u00e4rvarande har flera hundra plugins redan implementerats f\u00f6r Snort 3, omfattande olika anv\u00e4ndningsomr\u00e5den, till exempel m\u00f6jligheten att l\u00e4gga till egna codecs, introspektionsl\u00e4gen, loggningsmetoder, \u00e5tg\u00e4rder och alternativ i regler;\n<\/li>\n<li class=\"l\"> Automatisk identifiering av aktiva tj\u00e4nster, vilket befriar fr\u00e5n behovet av manuell specificering av aktiva n\u00e4tverksportar.\n<\/ul>\n<p>\u00c4ndringar j\u00e4mf\u00f6rt med den tidigare testutg\u00e5van som publicerades 2018:<\/p>\n<ul>\n<li class=\"l\"> St\u00f6d f\u00f6r filer f\u00f6r snabb \u00f6verskrivning av inst\u00e4llningar i f\u00f6rh\u00e5llande till standardkonfigurationen har lagts till;\n<li class=\"l\"> Kodimplementeringen m\u00f6jligg\u00f6r anv\u00e4ndning av C++-konstruktioner definierade i C++14-standarden (en kompilator som st\u00f6der C++14 beh\u00f6vs f\u00f6r kompilering);\n<li class=\"l\"> En ny VXLAN-hanterare har lagts till;\n<li class=\"l\"> F\u00f6rb\u00e4ttrad s\u00f6kning efter inneh\u00e5llstyper baserat p\u00e5 inneh\u00e5ll med hj\u00e4lp av uppdaterade alternativa implementeringar av algoritmer <noindex><a rel=\"nofollow\" href=\"https:\/\/ru.wikipedia.org\/wiki\/%D0%90%D0%BB%D0%B3%D0%BE%D1%80%D0%B8%D1%82%D0%BC_%D0%91%D0%BE%D0%B9%D0%B5%D1%80%D0%B0_%E2%80%94_%D0%9C%D1%83%D1%80%D0%B0\">Boyer-Moore<\/a><\/noindex> och <noindex><a rel=\"nofollow\" href=\"https:\/\/www.hyperscan.io\/\">Hyperscan<\/a><\/noindex>;\n<li class=\"l\"> Systemet f\u00f6r inspektion av HTTP\/2-trafik har praktiskt taget n\u00e5tt full beredskap;\n<li class=\"l\"> Snabbare start genom anv\u00e4ndning av flera tr\u00e5dar f\u00f6r att kompilera regelsamlingar;\n<li class=\"l\"> En ny loggf\u00f6ringsmekanism har lagts till;\n<li class=\"l\"> F\u00f6rb\u00e4ttrad identifiering av Lua-fel och optimerad hantering av vitlistor;\n<li class=\"l\"> \u00c4ndringar har genomf\u00f6rts f\u00f6r att m\u00f6jligg\u00f6ra omstart av inst\u00e4llningar i realtid;\n<li class=\"l\"> Ett RNA (Real-time Network Awareness) inspektionssystem har lagts till, som samlar in information om tillg\u00e4ngliga resurser, v\u00e4rdar, applikationer och tj\u00e4nster i n\u00e4tverket;\n<li class=\"l\"> F\u00f6r att f\u00f6renkla installationen har anv\u00e4ndningen av snort_config.lua och SNORT_LUA_PATH upph\u00f6rt.\n<\/ul>\n<p><noindex><a rel=\"nofollow\" name=\"link\"><\/a><\/noindex><\/p>\n<p>K\u00e4lla: <a \ncontent=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=52799\">opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Cisco \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0444\u0438\u043d\u0430\u043b\u044c\u043d\u0443\u044e \u0431\u0435\u0442\u0430-\u0432\u0435\u0440\u0441\u0438\u044e \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u043f\u0435\u0440\u0435\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a Snort 3, \u0442\u0430\u043a\u0436\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e\u0439 \u043a\u0430\u043a \u043f\u0440\u043e\u0435\u043a\u0442 Snort++, \u0440\u0430\u0431\u043e\u0442\u0430 \u043d\u0430\u0434 \u043a\u043e\u0442\u043e\u0440\u044b\u043c \u0441 \u043f\u0435\u0440\u0435\u0440\u044b\u0432\u0430\u043c\u0438 \u0432\u0435\u0434\u0451\u0442\u0441\u044f \u0435\u0449\u0451 \u0441 2005 \u0433\u043e\u0434\u0430. \u041f\u043e\u0437\u0434\u043d\u0435\u0435 \u0432 \u044d\u0442\u043e\u043c \u0433\u043e\u0434\u0443 \u043f\u043b\u0430\u043d\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u0442\u044c \u043a\u0430\u043d\u0434\u0438\u0434\u0430\u0442 \u0432 \u0440\u0435\u043b\u0438\u0437\u044b. \u0412 \u043d\u043e\u0432\u043e\u0439 \u0432\u0435\u0442\u043a\u0435 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u043f\u0435\u0440\u0435\u043e\u0441\u043c\u044b\u0441\u043b\u0435\u043d\u0430 \u043a\u043e\u043d\u0446\u0435\u043f\u0446\u0438\u044f \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430 \u0438 \u043f\u0435\u0440\u0435\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u0430 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u0430. \u0418\u0437 \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0431\u044b\u043b \u0441\u0434\u0435\u043b\u0430\u043d \u0430\u043a\u0446\u0435\u043d\u0442 \u043f\u0440\u0438 \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043a\u0435 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-79171","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.4 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Cisco \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0444\u0438\u043d\u0430\u043b\u044c\u043d\u0443\u044e \u0431\u0435\u0442\u0430-\u0432\u0435\u0440\u0441\u0438\u044e \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u043f\u0435\u0440\u0435\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sv\/blog\/news\/finalnyj-beta-vypusk-sistemy-obnaruzheniya-atak-snort-3\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.4\" \/>\n\t\t<meta property=\"og:locale\" content=\"sv_SE\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0424\u0438\u043d\u0430\u043b\u044c\u043d\u044b\u0439 \u0431\u0435\u0442\u0430-\u0432\u044b\u043f\u0443\u0441\u043a \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a Snort 3 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Cisco \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0444\u0438\u043d\u0430\u043b\u044c\u043d\u0443\u044e \u0431\u0435\u0442\u0430-\u0432\u0435\u0440\u0441\u0438\u044e \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u043f\u0435\u0440\u0435\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sv\/blog\/news\/finalnyj-beta-vypusk-sistemy-obnaruzheniya-atak-snort-3\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-04-24T23:42:02+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-04-24T23:42:02+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47 Den slutliga betaversionen av Snort 3-intr\u00e5ngsskyddssystemet | ProHoster","description":"F\u00f6retaget Cisco har presenterat den slutliga betaversionen av det helt omarbetade systemet f\u00f6r att f\u00f6rhindra attacker.","canonical_url":"https:\/\/prohoster.info\/sv\/blog\/news\/finalnyj-beta-vypusk-sistemy-obnaruzheniya-atak-snort-3","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sv_SE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0424\u0438\u043d\u0430\u043b\u044c\u043d\u044b\u0439 \u0431\u0435\u0442\u0430-\u0432\u044b\u043f\u0443\u0441\u043a \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a Snort 3 | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Cisco \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0444\u0438\u043d\u0430\u043b\u044c\u043d\u0443\u044e \u0431\u0435\u0442\u0430-\u0432\u0435\u0440\u0441\u0438\u044e \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u043f\u0435\u0440\u0435\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a.","og:url":"https:\/\/prohoster.info\/sv\/blog\/news\/finalnyj-beta-vypusk-sistemy-obnaruzheniya-atak-snort-3","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-04-24T23:42:02+00:00","article:modified_time":"2020-04-24T23:42:02+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"79171","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 16:43:23","updated":"2022-10-05 19:38:44","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/79171","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/comments?post=79171"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/79171\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/media?parent=79171"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/categories?post=79171"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/tags?post=79171"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}