首页    期刊浏览 2024年11月06日 星期三
登录注册

文章基本信息

  • 标题:Performance Evaluation of Snort under Windows 7 and Windows Server 2008
  • 本地全文:下载
  • 作者:Khaled Salah (Khalifa University of Science ; United Arab Emirates) Mojeeb-Al-Rhman Al-Khiaty (King Fahd University of Petroleum ; Minerals
  • 期刊名称:Journal of Universal Computer Science
  • 印刷版ISSN:0948-6968
  • 出版年度:2011
  • 卷号:17
  • 期号:11
  • 出版社:Graz University of Technology and Know-Center
  • 摘要:

    Abstract: Snort is the most widely deployed network intrusion detection system (NIDS) worldwide, with millions of downloads to date. PC-based Snort typically runs on either Linux or Windows operating systems. In this paper, we present an experimental evaluation and comparison of the performance of Snort NIDS when running under the two newly released operating systems of Windows 7 and Windows Server 2008. Snort's performance is measured when subjecting a PC host running Snort to both normal and malicious traffic. Snort's performance is evaluated and compared in terms of throughput and packet loss. In order to offer sound interpretations and get a better insight into the behaviour of Snort, we also measure the packet loss encountered at the kernel level. In addition, we study the impact of running Snort under different system configurations which include CPU scheduling priority given to user applications or kernel services, uni and multiprocessor environment, and processor affinity.

  • 关键词:Experimental Performance Evaluation, Snort, Windows 2008, Windows 7, network security, operating systems
国家哲学社会科学文献中心版权所有