Automatic Generation of Snort Content Rule for Network Traffic Analysis

摘要: The importance of application traffic analysis for efficient network management has been emphasized continuously. Snort is a popular system which detects matched to pre-defined signatures and perform various actions based on the rules. However, it very difficult get highly accurate meet purpose because tedious time-consuming work search entire data manually or semi-automatically. In this paper, we propose novel method generate in fully automatic manner form sort rule from raw packet captured link end-host. We use sequence pattern algorithm common substring satisfying minimum support flow data. Also, extract location header information signature are components snort content rule. When analyzed proposed several data, generated could detect more than 97 percentage