>
zx INT CcR O T K
s Ya TO WT Oi cN SN oN M cYOiTO dYa TO WT O i cN E YoN M T M Ta N K uoN a N ON y WT O i
E N cTS cN oTiUSTO SYTa y N TOOWT l E N cTS cN M ucN -N STa N a Yy TM T dYoR Ty T OTO cToN
a UM fYo SYdTcT dYOYo N M T g
qx HirO - roO - O T K
IN M TOT Ua Yo cN fYoN STO KTS TSa Ya E YdTE dTcT ZTSE UOWT l fN Ta TOWT N ON
fYoKUfUOiT O cYOiT O SYE Yoa YcN T TO N O-uM Ta N TE TU cTE T SYE N ST cN fUE UKSTO l
E N cTS KTOWT M Yy N OcUOiN R ToN OiT O E YE TdN cTdTE fYoE N OcTS TdTfN y T E YoR TcN
a YoTOiT O WT O i TcT cN cTy TM R ToN OiTOg e Ty TK a TE U M YE ucY E Yoa YfUE WT N E U
INT R US O DN ECT CYT O DN MKS T Ce VHI e xg
C YE ucY E Yoa YfUE M YM fUE UKSTO a UTE U dYM TKTM T O UOE US M YOYOE USTO
SYfN R TSTO SYTM TOT O V S CYUR O T K PD- O YK x cTy TM SYTM TOT O R ToN OiTOg \ N ST N OiN O
M YOYOE USTO TdT a TR T WT O i KToUa cN y N OcUOiN M TST KToUa M YM dUOWT N dYoY OrTOT TO
SYTM TOT O WT O i M TE TOi cTO fTN S fYocT a ToST O dTcT doua YcUo cTO SYfN R TSTO
SYTM TOT O R ToN OiTOl SToY OT TdTfN y T E N cTS cN oYOrTOT STO M TST E N cTS TSTO a Ya UTN
cYOiTO WT O i cN KToTdST O cTy TM SYTM TOTO R ToN OiT O g
tYa N M dUy TOOWT cToN SYTM TOTO R ToN OiTO TcTy TK a YfUTK TSE N bN E Ta UOE US
M Yy TSUSTO dYOiTM TOT O cToN a YfUTK dYOWT y TKiUOT TO TE TU iT OiiUTOl a YoE T
M YTSUSTO dYoy N OcUOiTO cN a YfUTK R ToN OiTOg
utitut IntrusionDetectionSystem eR WK d
t uOa Yd c Ta To HO E oUa N uO IYE Yr E N uO e Wa E YM VHI e x TcTy TK rTo T M YOcYE YSa N
dYOWU a Ud TE TU dYOiiTOiiU M Yy Ty UN R ToN OiTO cTO M Ta US SY a N a EYM R ToN OiTO WT O i
fYoa N -T E dYoUa TS V rT T rYuCR x TE TU a YuoTOi dYOiiUOT WT Oi a TK E YE TdN
M YOWT y TKiUOT STO KTS TSa Ya g e YKN OiiT HI e N ON M TM dU M YOiT ZTa N R N ST E YoR TcN
dYOWY o TOiTO a N a E YM R ToN OiTO M Yy Ty UN T R rb b O Y WT O i E YoR TcN dTcT R ToN OiTO cYOiTO
M YOcYE YSa N dYoUfT KTO io T-N S TE TUdUO fYa ToT O dTSYE cTE T WT O i y YZTE cToN Ty TM TE
Hs dYOiiUOTg \ N ST cN E YM USTOl a YfUTK dYoN OiTE TO TSTO cN rTE TE cTO oYa duO WT O i
cN fYoN STO fYocT a ToST O cTE T WT O i E Yy TK cN rTE TE V s Uofu l z8p8x g
HI e TcTy TK M YE ucY dYoTOiST E y UOTS TE TU dYoT OiSTE SYoTa WT O i cTdTE
M YOcYE YSa N TSE N bN E Ta WT O i M YOrUoN iT STO cTy TM a YfUTK a N a EYM TE TU R ToN OiTOg HI e

?
cTdTE M Yy TSUSTO N Oa dYSa N E YoKTcT d y Ty UPy N OE Ta O NoDUNd cTO DUT oDUNd cTy TM
a YfUTK a N a E YM TE TU R ToN OiTOl M Yy TSUSTO TOTy N a N a cTO M YOrTo N fUSE N cToN dYorufT TO
O NT R US O DN V BoN WU a l z88>x g
\ YON a HI e cTdTE cN fYcTSTO M YOR TcN z R YON a l WT N E U yDS T WorS Cd I NT R US O DN
E CT CYT O DN M KS T Ce VhHI e x cTO n CT t DR uWorS Cd I NT R US O DN E CT CYT O DN M KS T Ce VLHI e x g
INT R US O DN ECT CY T O DN MKS T Ce VHI e x E YoSYOTy cTO cN dYoiUOTST O a YrToT y UTa a YfTiT N
dYoT OiSTE SYTM TOT O WT O i cN iUOTST O UOE US M YOcYE YSa N a YoTOiT O cTO TSE N bN E Ta
M YOrUoN iT STO cN cTy TM a YfUTK R ToN OiTOg INT R US O DN ECT CYT O DN MKS T Ce VHI e x
M YoUdTST O a YfUTK Yy YM YO dYOE N Oi dTcT SYTM TOT O R ToN OiTOg mYocT dTE z M TrTM
E YSON S UOE US M YOcYE YSa N a YoTOiT Ol WT N E U S O cNrT UR CWorS Cd dCT CYT O DN cTO
rNDer- KWorS Cd dCT CYT O DN g tYcUT E YSON S E Yoa YfUE M YM N y NSN SYUOiiUy TO cTO
SYSUoT Oi M Ta N OiP M Ta N Oig Boa N E YSE Uo cToN INT R US O DN ECT CY T O DN MKS T Ce VHI e x cTO
E YSON S WT O i cN dTSTN fYocT M dTS fYa To dTcT KTa N y SYoR T cToN INT R US O DN ECT CY T O DN
MKS T Ce VHI e x N E U a YOcN oN g s ouio TM WT Oi cN dYoiUOTSTO fN Ta TOWT cN a YfUE a YfTiTN
INT R US O DN ECT CYT O DN MKS T Ce VHI e xg
HI e R UiT cTdTE cN iUOT STO UOE US M YM uON E uo N y Ty U y N OE Ta R ToN OiT Ol a YKN OiiT
M YOcYE YSa N R N ST a N a E YM a YcTOi cN E ToiYE STO uy YK a YoTOiT O R ToN OiTO
C YOUoUE IToT dToY ccW cTO nUM M TcN V z8pzx E YocT dTE cUT R YON a cTa To cYE YSa N
N OE oUa N WT N E U fYofT a N a GDS T VhHI e x cTO fYofTa N a NCT t DR u VLHI e x a YcTOiSTO
E YcTdTE cUT R YON a M YE ucY TOTy N a N a CiCNT dTcT HI e WT N E U MO cNrT UR C mrS Cd cTO
HNDer- K mrS Cd g
utitutit Clv B \ qZlv B \ R WK
utitutitit Host-basedIntrusionDetectionSystem er R WK d
hHI e E Yoy YE TS cN a N a E YM cTO cTdTE M YOiTM TE N a YM UT TSE N bN E Ta cToN GDS T g
hHI e TSTO M YOrTE T E a YM UT TSE N bN E Ta WT O i cN E YM USTO cTO M Yy TSUSTO dYOiYrY STO
TE TU M YOiTOTy N a T TSE N bN E Ta dTcT SuM dUE Yo E YoE YOE U cTO M YOrTo N E TOcTPE TOcT
a YoTOiT O dTcT SuM dUE Yo E Yoa YfUE g hHI e M Yy TSUSTO dYOiTZT a TO E YoKTcT d
dTSYE PdT SYE TE TU TSE N bN E Ta a YfUTK GDS T TdTST K E YoR TcN dYorufT TO a YoTOiT O TE TU
dYOWU a UdTO cTy TM R ToN OiT O TE TU E N cTSg

@
utitutitut Network-basedIntrusionDetectionSystem eTR WK d
n CT t DR uWorS Cd I NT R US O DN E CT CYT O DN M KS T Ce V LHI e x M YoUdTSTO R YON a HI e
WT O i dTy N Oi UM UM cTO a YoN Oi cN iUOT STO cTy TM a YfUTK R ToN OiTOg C YSTON a M Y N ON
M YOcYE YSa N a YoTOiT O cYOiTO M YOTOiSTd cTO M YOiTOTy N a T dTSYE PdT SYE R ToN OiTOg
LHI e fN Ta TOWT cN E YM dTE STO dTcT a YfUTK E N E NS dUa TE TE TU E YM dTE WT O i a E oTE YiN a cN
cTy TM a YfUTK R ToN OiTO UOE US M Yy TSUSTO dYOiTZT a TO E YoKTcT d T R rb b O Y WT O i
M YOUR U cTO fYoT a Ty cToN a YM UT dYoT OiSTE V dCiO YC x cTy TM R ToN OiTOg
utitutut Elw /p l Ov af B \B \ Event R WK
ut itu tutitSignatureBased
MO cNrT UR C orS Cd M YOiiUOTSTO dYOcYSTE T O cYOiTO rToT dYOruruST O SYR TcN TO
V CiC NT x cYOiTO R YON a a YoTOiT O WT O i E Yy TK cN SYOTy dTcT drT rorS C HI e g mYSON S N ON
a TOiTE Y-YSE N - cTO M YoUdTST O M YE ucY UE TM T WT O i cN iUOT STO dTcT fYfYo TdT
dYoT OiSTE TE TU doucUS HI e UOE US M YOcYE YSa N a YoTOiT Og
ut itu tut u tAnomalyBased
HNDer- K orS Cd M YOiiUOT STO dYOcYST E TO cYOiTO rTo T M YOiN cY OE N -N STa N
dYoN y TSU TE TU TSE N bN E Ta WT O i E N cTS fN Ta T WT O i E YoR TcN dTcT a UTE U GDS T TE TU R ToN OiT Og
HNDer- K orS Cd M YM fYOE US dYoN y TSU cTa To dTcT a YfUTK SuOcN a N R ToN OiTO OuoM Ty
cYOiTO dou-N y dYOiiUOT E YoE YOE U SYM UcN TO M YOiUSUo cTO M YM fTOcN OiSTOOWT
SYE N ST TSE N bN E Ta R ToN OiTO fYoR Ty T O E N cTS OuoM Ty g
u ti t u txt baAa Sl AZa R WK
INT R US O DN dCT CYT O DN S KS T Ce cTdTE fYoUdT dYoTOiST E y UOTS TE TU dYoT OiSTE SYoT a
WT O i M Yy TSUSTO uE uM TE N a Ta N doua Ya M uON E uoN Oi SYR TcN TO WT O i E YoR TcN dTcT a YfUTK
R ToN OiTOg HI e cN fUTE fUSTO UOE US M YOiiT OE N STO -UOia N b O R Ct r- - SToY OT M YM N y N SN
E UiT a WT O i fYofYcT g HI e TcTy TK dYM fYoN a N OWT y dYoE TM T R N ST E YoR TcN a YoTOiT O TE TU
TcTOWT dYOWa Ud cTy TM R ToN OiTOg
tYa N M dUy TO cToN INT R US O DN ECT CY S O DN MKS T Ce VHI e x TcTy TK HI e M YoUdTSTO
a YfUTK fYOE US TE TU M YE ucY dYOiTM TOT O R ToN OiTO WT Oi M YOiiUOTSTO E YSON S
dYOcYE YSa N T O cToN a YoTOiT O TE TU iT OiiUTO dTcT a YfUTK R ToN OiT Og

/8
zyy, ( ! 2$
a dz)R +..." dz) R "z), rrk r(  rk r(  rR p r && rR rp rAk D er D &'cD e &po ic r)D
6Dr o pe d &D Rcr ci r d &D v(e r ca +6 a , tr d  R i)&rD e tr d  R i) iD r rd D eiv &rderd
(D dr  rrR D dD " a dz)R D )rdPr d pdR pe &i)zAi )r D &i)&r  D  i&aaPDA  d Dc rd R ik r(
D D dR i) r D erd ei &i&i)r Ar rAk D er D AD (re eiR D r rd v idpepd io &e e ' Pr  &o a "
a dz)R v idr drk D  D   iv pr k rk p k D dR r o r)D drd pdR pe v ididp + e Dd   , rd
v idPr) D &i&i)r Ar o idD  Aidtp  pArd rk rv  i&pr( o r)D drd "
a dz)R v i)pArerd e & r y Po c tr d  v r D ( &i)&r D  i&aaPDAt  d Dc %  i(D dr
PpepA v i)iAzR erd &rD Aidpdr tr d   pr( R i)&D r r rk rv k D depdrd
$o P'-d iP *e co 6Dr co  Pic +n&, " k i( er)idr D R p% rr &i&i) rAr e & r y Po c AD (re
eiR D r tr d  v iv &i)D erd n& pdR pe a dz)R % 5 v D  rk dtr 6Rv % cDr co pdR pe
d io &e & r (d DA&y e % rd id A tr d  &i)&r D   4  i(D dr &D  r D re i v ik rk pD
y c) )o &y e co +  idR )rdD rd 6.D r) z % 18/5,"
zyy,y e2)4 2! %! ( ! 2$
a dz)R D &rD ei rk rv &i&i) rAr ezv Azdid tr d v iv D k D eD eipdrrd tr d 
 rdrR AidR D d " yzv Azdid D dD &iei)o r r v r pdR pe v idiR ie D  i)rdr d tr d 
&i)&i r rd pdR pe v id(r D k erd eik pr)r d Arr r d 'c tr d  D D dD derd Arr  D  R iv
iR ie D " 6 a &i)&r  D  erd a dz)R pv pv dtr R i)D )D r)D ezv Azdid &i&i) rAr
ezv Azdid +#)D tp  % 188> /59,% k D (rR Arr nrv &r) 1"/"
nrv &r) 1" / yzv Azdid a dz)R

//
8/ Rcz&Ac o 'Pzcr
Rcz&Ac o 'Pzcr v idrv &D k AreiR r)D &i&i) rAr o idD  o r)D drd tr d 
&i)&i r r)D rdR r)v per o r)D drd rd v iv Ai) D rAer d AreiR pdR pe D A)z i
rR rp D eD )D v v idpo p Acr cir d &D cDd Dc " #dR r)v perdtr rArR &i)pAr r -co Dcr %
a 7 %    rd tr d  k rD d"
3/ o c'o &ic e e &o
o c'o &ic e e &o v i)pArer d ezv Azdid rR rp ' ptd De tr d  rArR D pdrer d
Arr a dz)R pdR pe v idtp  pd rR rp v idp&r ( AreiR rR r  i&ik pv Acr cir d &D
cDd Dc v ik reperd &i&i) rAr zAi)r D pdR pe v idPr) D R r(p o D er AreiR D pdr erd
zk i( Aidtp  pA" o c'o &ic e e &o Arr a dz)R rArR v id Acz&Act erd &0 7 4 %
v i k reperd Ac o PacDr Pe d AreiR % v idr &pderd eiv &rk D rk D )rd <  rd
tr d  k rD d"
3, Rcr ci r d &D Dd Dc
Rcr ci r d &D cDd Dc rrk r( &rD rd R i)AidR D d r)D a dz)R " pr dtr rrk r(
pdR pe v idiR ie D o D er R i)o rD reR D D R r Aidtp  pA Arr AreiR " Rcr cir d &D cDd Dc
v iv Aiei) o rerd o p ce a dz)R pdR pe R po prd D dD " #p ce D &rPr ei rk rv  R )peR p)
rR rp )rdR rD rR r d Dr co DP eiv pD rd D PzPzeerd idrd AreiR tr d  rr" * D er
AreiR  i prD idr d o p ce tr d  rr% R D drerd rerd D rv &D k % o D er R D re AreiR
rerd D &prd" D drerd tr d  D rv &D k rArR &i)pAr  &d D AreiR rR rp
v idreR D erd P co r "
Rcr ci r d &D cDd Dc v i)pArerd &rD r d r)D a dz)R tr d   rdrR &i)rdR pd
Arr .reR p R rdr A" $ reR p R rdrA v i)pArer d .reR p tr d  D &pR p(erd
pdR pe v i)i Azd AreiR % (rk D dD &i)rdR pd Arr  i&i)rAr &rp e co co tr d 
rr rd  i&i)r Ar &rdtr e )pk i tr d  R ik r( D iD dD  D erd"
!i )D epR tr d v iv Aidr) p(D .reR p R rdrA Arr Acr cir d &D cDd Dc
r, * pv k r( o p ce "
&, yieprR rd v i D d Arr  D  R iv "
P, yiPi ArR rd )pe d Dr co DP e co co a dz)R "
, !i &rd Arr o r)D drd "
yiR D er v idi rD d  D  R iv eirv rdr d ezv ApR i) &i)&r  D  erd (6 a
+ n cr y &o z 6Dr o pe d &D Rcr ci r d &D v(e r ca ,% reR z) D dD (r)p D Ai)R D v &rderd"

/1
< rR rR rd &r(.r  D  Riv iR ie D rArR v iv &ik r( AreiR rd v idi)r Aerd o p ce
Arr &rD rd AreiR tr d  &i)&i r" !r D rd R i) i&pR D rdR r)r dtr
r, Pizc r 'P( &PA " 4rk D dD &i)r )R D rArR D PD AR rerd o p ce tr d 
D pdr erd zk i( Acr cir d &D cDd Dc pdR pe v idPr) D e r o d D D rk rv rR r
tr d  rr Arr AreiR "
&, kcPAco  P(co r o PDe '&o r " kcPAco D dD rArR &i)pAr <  % &6 rR rp
-cPAco  P(co o PDe '&o r k rD ddtr " 4rk D dD o pr rArR &iei) o r Arr
-cPAco < c  "
P, kcPAco  cc  P(co rAk D er D " kcPAco k rti ) rAk D er D R i)v r pe -cPAco
6(a % 2 % a (c  rd a c % R D re D &rR r D (rdtr -cPAco D dD  ro r"
Rcr ci r d &D cDd Dc &iei) o r idrd Pr)r tr d  &i)&i r R i)rdR pd i) D r)D
a dz)R "  rr i) D /"; Acr cir d &D cDd Dc rerd &i)(i dR D &iei)o r o D er AreiR R ik r(
 i prD idrd o p ce " Rcr ci r d &D cDd Dc v idrv &D k R D drerd tr d  &i)&i r
idrd v i'  & AreiR rR rp v idreR D erd P co r % R i)rdR pd Arr o p c  " 4rk D dD
AreiR (r)p  i prD idrd e)D R i)D r &i&i) rAr o p ce % (rdtr o p ce Ai)R rv r tr d 
rerd D R i)rAerd Arr AreiR rd o p ce tr d  k rD d R D re rerd D (D )rperd"
 idrdrdr d o idD  D dD &rD e% eiPpr k D Arr  rR p Ai)v r r k r(rd" #p ce idrd
A)D z)D R r )idr ( v idreR D erd P co r idrd A)D z)D R r )idr(% &r(erd idrd
o p ce &i)A)D z) D R r R D dD rerd v id(r  D k erd P co r &i)A)D z) D R r R D dD rerd
D R iv ArR erd eiv pD rd Arr )rdR rD o p ce "  i)v r rk r(r d D dD eiv pD rd D )rk rR
Arr a dz)R i) D 1 D v rdr  iv pr o p ce R ik r( D PzPzeerd idrd AreiR
 i&ik pv v idreR D erd P co r " a iR ik r( v idPzPzeer d  iv pr o p ce % o p ce
&i)A)D z) D R r R i)R D dD v iv D k D ( pdR pe v idreR D erd P co r "
5, a D  R iv & rd  co r
!i )r r )erd rAr tr d  D R iv perd Acr cir d &D cDd Dc Arr AreiR % AreiR
rArR D pdr erd pdR pe v i'  & eiD rR rd rR rp v idreR D erd P co r % &i)r dR pd
Arr rAr tr d  D R iv perd Acr cir d &D cDd Dc Arr AreiR " & D  D v Ard Arr
z)v rR D k i R ie  ii)(r dr% D k i &i)o idD  r i'Apa' rR rp &idR pe tr d  k rD d" 2D k i
 & D  D v Ard D D )ieR z)D D r)D k zD a dz)R  iPr )r Ac Pp r "  i)D dR r( a dz)R 'k Arr
i&aaPDA  d Dc rArR D pdrer d pdR pe v iv zD D er D k zer D r)D  & rd P co r
tr d  D (r D k erd"

pq
=x C ucUy fUT PUT
C ucUy fUT PUT cTdTE M Yy TSUSTO fYfYo TdT udYoT a N fYofYcT E YoiTOE UOi
fTiTN M TOT rTo T dYOWN M dTOTO SYy UToT O WT O i cN KTa N y STO a N a EYM - Dc cTO r- CR T
cToN e OuoE g s TcT cTa ToOWT M ucUy N ON M YOiTE Uo R YON a SYy UToT O WT O i cN KTa N y STO
uy YK a N a E YM - Dc cTO r- CR T g vYo cTa To STO SuO-N iUoTa N l SYy UToTO eDdU- cTdTE
M Yy TSUSTO KTy PKTy fYoN SUE k
Tx k DccO Nc SY cTy TM -N y Y D bToD y uiD e OuoE D Ty YoE a TE TU -N y Y y TN OOWT g
fx C YOiN oN M STO T R rPS e LC s g
rx C YOiN oN M STO dYa TO SY S KS - Dc g
cx k DccO Nc SY cTy TM drT rorS C a YdYoE N aKM9k TE TU fR rY- Cg
Yx C YOiKTa N y STO DUT PUT C ) T CNS O o- C arR uUP k rNcUrcC VEC 7x g
-x C YOiUfTK SuO-N iUoTa N dTcT R DUT CR TE TU b O R Ct r- - g
ix C YOiN oN M STO dYa TO MCR iC R aCS S rcCR m- DYu Ve C vx SYdTcT M Ya N O
fYofT a N a STO aO YR DS Db T LO NdDt S g
e OuoE M YM N y NSN q fUTK M ucYl WT N E U k
px M NO b b CR eDdC l UOE US M Yy N KTE dTSYE WT O i y YZTE cN R ToN OiTO g
zx wrYuC T - DccCR eDdC l UOE US M YOrTE TE a YM UT dTSYE WT O i y YZTE cN
R ToN OiTO UOE US cN TOTy N a T cN SYM UcN TO KToN g
qx INT R US O DN ECT CY T O DN aDdC l dTcT M ucY N ON e OuoE TSTO fYo-UOia N UOE US
M YOcYE YSa N a YoTOiT O WT O i cN y TSUSTO M Yy Ty UN R ToN OiTO SuM dUE Yo
utitxtut SnifferMode
DOE US M YOR Ty TOSTO e OuoE dTcT S NO b bCR eDdC cYOiTO ruOE uK dYoN OE TK S NO b bCR
eDdC dTcT mTfYy zgpg
mTfYy zgp s YoN OE TK MNO b b CR aDdC
Lu s YoN OE TK /UOia N
p F e OuoE G b
C Yy N KTE GCrdCR m< s D Hs dTSYE WT O i y YZTE
z F e OuoE G bc
C Yy N KTE N a N dTSYE
q F e OuoE G bcY
C Yy N KTE KYTcYo y N OS y TWY o dTSYE a YdYoE N
CT GCR NCT GCrdCR
5 F e OuoE G b G c G Y
C Yy N KTE KYTcYo m< s D Hs lN a N dTSYE cTO GCrdCR
- O Nu a YrT oT fYoa TM T TO

p5
utitxtxt PacketLoggerMode
mYOE UOWT rUSUd M Yy Yy TKSTO UOE US M Yy N KTE dTSYE WT Oi y YZTE a YcYM N SN TO
rYdT E cN y TWT o E YoUE TM T R N ST SN E T M YOiiUOTSTO CT GCR NCT fYoSYr YdT E TO p88C fda l
y TWT o TSTO S YR D- - O Nc cYOiTO rYdT E a YSTy N a Ua TK UOE US M Yy N KTE dTSYE WT O i cN
N OiN OSTOg < ToT dTy N Oi a YcYoKT OT UOE US M YOiT E Ta N KTy N ON TcTy TK M YOWN M dTO cUy U
a YM UT dTSYE WT O i y YZTE SY a YfUTK b O - C UOE US cN y N KTE g vY fYoT dT dYoN OE TK wrYuC T
k DccCR aDdC W TOi M UOiSN O cTdTE cN iUOT STO UOE US M YOrTE T E a YdYoE N mTfYy zgzg
mTfYy zgz wrYuC T k DccCR aDdC
Lu s YoN OE TK /UOia N
p gD e OuoE G cYb G y gD y ui C Y W- Dc dTSYE WT O i y YZTE
z gD e OuoE G cYb G y gD y ui G K p@zgp9?g8g8D z5 C YPy ui Kua E p@zgp9?g8g8D z5
q gD e OuoE G cYb G y gD y ui G f
/ N y Y WT O i cN y ui cTy TM b DR erT
oO NrR K
5 gD e OuoE G cb G o dTrSY E gy ui
C YM fTrT -N y Y WT O i a UcTK
cN P - Dc
s YoN OE TK WT O i dTy N Oi dYOE N Oi UOE US M YP - Dc dTSYE WT O i y YZTE TcTy TK Py gD y ui
WT O i M YOYOE USTO fTKZT dTSYE WT O i y YZTE TSTO cN - Dc D cN rTE TE SY -N y Y gD y uig
vY fYoT dT dYoN OE TK E TM fTKTO cTdTE cN iUOT STO a YdYoE N G K p@zgp9?g8g8D z5 WT O i
M YOUOR USTO fTKZT WT O i cN rTE TE KTOWT dTSYE cToN GDS T M TOT a TR Tl cTO G f WT O i
M YM fYoN E TKUSTO TiTo b O - C WT O i cN - Dc cTy TM b DR erT oO NrR K l fUSTO Be < HH l DOE US
M YM fTrT -N y Y - Dc cTdTE cN y TSUSTO cYOiTO M YOR Ty TOSTO e OuoE cYOiTO cN
E TM fTKSTO dYoN OE TK G o OTM T -N y Y - Dc l a YdYoE N dTcT mTfYy zgzg
utitxtGt IntrusionDetectionMode
I NT R US O DN dCT CYT O DN eDdC TcTy TK doua Ya M YOcYE YSa N dYOiiUOT TO WT O i E N cTS
a TKl TE TU a YoTOiT O E YoKTcTd a UTE U R ToN OiTO SuM dUE Yog INT R US O DN ECT CY T O DN MKS T Ce
VHI e x cN oTOrT Oi cTO cN iUOT STO UOE US M YM fTOE U cTy TM M YOiKTy TOiN TE TU
M YOiUoTOiN TOrT M TOl SYoUa TST O WT O i cTdTE cN E N M fUySTO cToN TSE N bN E Ta GrYuO Nc g
HI e M YoUdTST O SuM fN OTa N dYoTOiST E y UOTS TE TU dYoTOiST E SYoT a WT O i cTdTE
M Yy TSUSTO cYE YSa N dYOWU a UdTO dTcT a YfUTK R ToN OiTOg HI e cTdTE M YOcYE YSa N

/=
rrdtr pArtr tr d  v iv &r(rtr e rd v idtr depR ei)r (r D rrd% eir k D rd% rd
eiR i) i D rrd rR r Arr  i&pr( o r)D drd ezv ApR i)" a i)rdrd &D  r &i)r r k r)D k pr)
 D  R iv % z)rd rk rv tr d  v idtr k r(pdrer d (re re i tr d  D &i)D erd% rd z)rd
R D re &i).i drd tr d  v idPz&r v idrArR er d (re re i " 6 a R D re &D  r
D pdr erd  iPr )r R i)AD  r(% R iR rAD (r)p v ido rD &rD r d r)D Ai)idP rdrr d rd
ei)r der k rder('k r der( eirv rdr d  +0 D rd% 18/5,"
c zi zAi)r  D a dz)R tr d  Ark D d )pv D R rrk r(  i&rrD AidiR ie D Aidtp  pA
+ d Dr o pe d &D Acr cir d &D/ D o r)D drd tr d  eD R r pdr erd" < D )D e(r v zi zAi)r D pdR pe
AidiR ie D Aidtp  pA rrr( idrd v idrv &r(er d Ai)D dR r( ei a dz)R pdR pe
v iv &rPr D k i ezdD p)r D G P drv r'D k i'ezd D p)r D "Pzd "  D D k i ezdD p) r D D dD
 pr( PpepA &rdtr e% R i R rAD  i&rD rd &i r) R ik r( D  iR  iPr )r &rD e rk rv PzdR z(
a dz)R "Pzd tr d  D &r.r zk i( e &po ic a dz)R "
6Dr o pe d &D Rcr cir d &D v(e r ca +6 a , rrk r(  i&pr( rAk D er D e & r y Po c rR rp
-Po Ay Po c tr d  rArR v idiR ie D reR D D R r tr d  v idPp)D rerd rk rv  i&pr(
o r)D drd" 6 a rArR v ik reperd d De 'cze d R i)(rrA k rk p k D dR r d D)&pDA rd
&pr )&pDA rk rv  i&pr(  D  R iv rR rp o r)D dr d% v ik reperd rdrk D  D  rd v idPr) D
&peR D r)D Ai)Pz&r rd d Dr o pe d &D +Aidtp  pArd,  iAi)R D Ai)D dR r( Arr r&ik 1"3"
r&ik 1"3  idPr) D rd  idtp  pA
(z  i)D dR r( 2pd D
/
"D a dz)R G i G k "D k z G (
/@1"/9?"8"8D 15 G P
a dz)R "Pzd
c ik reperd rdrk D  D  rd v idPr) D &peR D
r)D Ai)P z&rrd D dR )p D +Aidtp  pArd, tr d 
 pr( D '  &  rrR v ik i.rR D -&e r
/@1"/9?"8"8D 15
1
"D a dz)R G  G (
/@1"/9?"8"8D 15 G k "D k z G P
a dz)R "Pzd
c ik reperd rdrk D  D  rd v idPr) D &peR D
r)D Ai)P z&rrd D dR )p D +Aidtp  pArd, tr d 
v ik rk pD (z R /@1"/9?"8"8D 15
&dR pe v ik reperd iR ie D Aidtp  pA  iPr )r A)D d D A a dz)R (r)p v ik reperd
 &d D AreiR tr d  k i.rR rArR v idpdrerd Ai)D dR r( G k drv r' D k i'  &d D % rR rp
v iv &D r)erd a dz)R v idpdrerd Ac Pp r D k i  &d D 'dtr D Ad o cir &o (
D r)D k zD a dz)R " yiv pD rd v idrdrk D  r PrR rR r d D  &d D AreiR tr d  rr  i prD
idrd D  D Ai)D dR r( a dz)R "Pzd" &dR pe v idD )D v erd P co r ei e (e  & &(E eD R r
&D  r v idrv &r(erd  .D R P( G  %  iAi)R D r&ik 1"5 "

p9
mTfYy zg5 s YOiN o N M TO H- CR T SY MKS - Dc
Lu s YoN OE TK /UOia N
p
gD e OuoE G r e OuoE gruO- G y gD y ui G a G K
p@zgp9?g8g8D z5
s YM fYoN E TKUTO SY S KS - Dc SY Kua E
p@zgp9?g8g8D z5
z
gD e OuoE G r e OuoE gruO- G a G K
p@zgp9?g8g8D z5
s YM fYoN E TKUTO SY S KS - Dc SY Kua E
p@zgp9?g8g8D z5
BcT fYfYo TdT E TM fTKTO dYoN OE TK WT O i TSTO M YM fUTE doua Ya cYE YSa N M YOR TcN
y YfN K Y--N a N YOl M YSTON a M Y dYM fYoN E TKUT O r- CR T cN k O NU) cTdTE M Yy TSUSTO S CT O Nc
cYOiTO dYoN OE TK G B a YfTiTN fYoN SUE l PB -Ta E l M ucY r- CR T WT O i rYdT E fYoN a N ZTSE Ul
fYoN E Tl Hs H PDR T E UR UTO cYOiTO SYE YoTOiT O fYoN SUE N ON k
px PB b U- - UOE US M ucY r- CR T cYOiTO N O-uoM Ta N y YOiST dg
zx PB UNS DYu UOE US M ucY r- CR T SY UNO ) S DYuC T g
qx PB NDNC UOE US M YM TE N STO M ucY r- CR T g
BiTo e OuoE fYoudY oTa N a YrT oT y TOia UOi a YE N Td STy N t DR uS T rT O DN D S CR iCR cN oDDT l
SN E T cTdTE M YOTM fTKSTO SY -N y Y D YE rD orgcD or gy urTy dYoN OE TK cN fTZTK N ON
D Ua oD y urTy D fN OD e OuoE G c G K p@zgp9?g8g8D z5 G r D ouuE D e OuoE D e OuoE gruO- G B -Uy y G a G I
TE TU D Ua oD y urTy D fN OD e OuoE G c G r D ouuE D e OuoE D e OuoE gruO- G B -Uy y G a G I cN M TOT G I
TcTy TK S t O TYG WT O i M YOiTE Uo TiTo e OuoE fYSYo R T a YfTiT N ErCeDN VfYSY oR T cN
fYy TSTOi y TWT oxg
tYa N M dUy TO cToN e OuoE N ON TcTy TK e OuoE M YoUdTSTO Tdy N STa N dYOcYE YSa N T O
a YoTOiT O TE TU iT OiiUTO R ToN OiTO WT Oi fYofT a N a INT R US O DN ECT CY T O DN MKS T Ce VHI e x
WT O i fYo-UOia N UOE US M Yy TSUSTO dYOiTM TOT O R ToN OiTOg
utitG Firewall
vO R Ct r- - TcTy TK Ty TE WT Oi cN iUOT STO UOE US M YOrYiT K uoTOi y UTo
M YM dYouy YK TSa Ya SYa UTE U R ToN OiTOg vO R Ct r- - M YoUdTST O a UTE U SuM fN OTa N cToN
dYoT OiSTE y UOTS cTO dYoT OiSTE SYoTa cTO b O R Ct r- - fN Ta TOWT M YOYoT dSTO
dYOiYy UTo TO oYOr TOT TE TU dYoN OE TK UOE US M YM N y N K Ty TM TE WT O i E TS cN SYKYOcTSN
cTO cN N OiN OSTOl b O R Ct r- - M YM dUOWT N rTo T SYoR T cTy TM dYOiTM TOT O R ToN OiTO WT N E U
b O R Ct r- - fYSYoR T cYOiTO M YOiT M TE N dTSYE Hs WT O i M Yy YZTE N OWT Vs Uoful z888xg

/>
2pd D 'pd D pv pv  d o cy P  rrk r(  i&rrD &i)D epR
/, vr Pr d i 'Pizc r  d  r co d D pdR pe Aidtr ) D dr d AreiR  iPr )r  R rR D  "
1, R(DPad i 'Pizcr  d  rco d D pdR pe Aidtr )D drd AreiR  iPr )r D drv D  "
3, vr Pr c p  d  r co d D pdR pe Aidtr ) D dr d AreiR &i)r  r)er d  R rR p "
5, o &0( "
!i )r r )erd ezdD p) r D r)D  d o cy P  % re i rArR D rR p) &i)r r )erd 
PAAo ce e % '&o r % rd r)r ( D dz)v r D %  i(D dr pdR pe v iv r(rv D  d o cy P  e &iei) o r
eD R r Ai)k p v idiR r(pD Aidrk rv rR rd  a R rR D  rd  D drv D  "
/,  rk rv rR  R rR D  rrk r( rk rv rR tr d  Ai)v rdi d% tr d  v i)pArer d rk rv rR
r)D  prR p v i D d tr d   ik rk p D (p&pder d ei D dR i)diR "
1,  r)i  D drv D  rrk r( rk rv rR  tr d   ik rk p &i)p&r ('p&r( tr d 
&i)pd D  i&rr D ezdie D ei o r)D drd"
a ik rD d D R p  d o cy P  o pr v iv Apdtr D er)r eR i)D  R D e rk rv Aidrv rdr d o r)D dr d
D rdR r)r dtr
/, a ir k r k rk p k D dR r o r)D drd% &rD e r)D rk rv rR rp r)D k pr) (r)p v ik rk pD
 d o cy P  % (rk R i) i&pR rerd R i)(rk r dD zk i(  d o cy P  r)D  iv pr re i
rk rv &idR pe rArApd eiPpr k D  d o cy P  "
1, yi&D o rerd eirv rdrd (rdtr rerd v iv &i)D erd D o D d pdR pe v iv r peD
e co co rR rp o r)D drd ezv ApR i) tr d  v iv idp(D  tr ) rR R i)R idR p"
3, !d o cy P   idD )D &i&r R i)(rr A AidiR )r  D % tr d v idrdrer d &r(.r
 prR p  D  Riv rArR D Ai)Prtr rd v ido rv D d eirv rdr d r)D  D  R iv
zAi)r  D "
#r &i&i) rAr v rPrv Ai)&ir rd r)D  d o cy P  % v r D d' v r D d R D Ai v iv D k D eD
eipdR pdrd rd ei)pD rd%  iPr )r pv pv % R D Ai r)D  d o cy P  rr 3 v rPrv " ArD R p
/,  reiR  d  r co o &pr co
 reiR  d  rco o &pr co v idpdrerd eiR rdR prd pdR pe AreiR  % v rdr tr d 
&zk i( v r pe rd v rdr tr d  (r)p D R zk re" d z)v r  D tr d  D  r)D d r)D
 prR p AreiR tr d  v ik i.rR D o r)D dr d% D rdR r)r ddtr
r, a pv &i)  PAAo ce e rk rv rR r k D r)D  AreiR +PzdR z( /@1"/?9"/"1,"
&, po prd  PAAo ce e rk rv rR  tr d  rerd v idi)D v r  AreiR +PzdR z(
/@1"/?9"/"3,"

/?
P, po prd rd  pv &i) r o PDe '&o r t cc PAAo ce e v i)pArer d k iik r o PDe '&o r
r)D '&o r Dpa)co + iAi) R D <  rd &6 ,"
,  'o &r &i& 1 tr d  &i)pd D  i&rrD r o PDe '&o r 'o &r &i& "
i, 6Dr co  Pic pdR pe o &pr co idrd R D r rR rp k i&D ( '&o r % r)D d Dr co  Pic o &pr co
v rdr AreiR rR rd rR rp &i)R po prd"
1, '' d iPr d &D cc $Pr cy P(
'' d iPr d &D  cc Pr cy P( o pr D eidrk idrd P'' d iPr d &Dt'o &0(
 d o cy P  "  rr R D Ai D dD pe co (r)p v ik reperd ezdR re idrd Pr cy P( tr d 
v idpdrerd rAk D er D ezv Azdid 'o &0( D rdR r)r dtr rrk r(
r, , c Dcr
&, 2
P, # &d D
, vcDAaPd 
i, 4
, , -c 0 y d DA&y e (e r ca
3, % d o ipd r cc $Pr cy P(
% d o ipd r  cc Pr cy P( v i)pArer d  D  R iv 'o &0( e co co tr d   iPr )r  R rR D 
v idrv &r) erd o r)D drd k rk p k D dR r tr d  rerd D  rv ArD erd" % d o ipd r 'o &0(
 ik rk p v idD I D derd AreiR tr d  &i)D  D '&o r rk rv rR 'r k rv rR tr d  D D ID derd zk i(
rR p)rd '& d i( +ei&D o rerd,"
i)r ArR &i&i) rAr R po prd Aidpdrrd  d o cy P  % rdR r)r k rD d
r, !d o cy P  &D r rdtr D pdr erd pdR pe v idPir ( rR rp v ididrk D erd rk D )rd
rR r R i)R idR p" #)R D dtr %  iR D rA AreiR tr d  v r pe rR rp eik pr) r erd
D Ai)D e r% rArer( R iArR rR rp R D re idrd P)D R i)D r tr d rr Arr  R rdr)
eirv rdr d tr d  D iD dD  D erd rk rv  d o cy P  "
&, &dR pe v ik D dpdD idrd v idtr )D d% v iv &rR r D rR rp &r(erd v idzk re
 prR p rR rp  iv pr (p&pdr d rR rp eiD rR rd  prR p ezv Azdid Arr o r)D drd
A)D &rD idrd o r)D dr d k pr) tr d  &perd v i)pArerd )prd k D depAdtr "
P,  idpdr rd  d o cy P  tr d  rArR v idPir ( pArtr &i)&r rD r o &: PD -&o e ce %
d o pe % '-d e -d D % e '(y Po c pdR pe v iv r peD  D  R iv tr d  D R po p idrd Pr)r
v idPir ( (p&pdr d r)D k pr)% eiPpr k D tr d  D Ai)pdR perd &rD e zv ApR i)

/@
rd '&o r R i)R idR p  iAi)R D Arr nrv &r) 1"1"
nrv &r) 1"1 6i rD d 2pd D !d o cy P 
, !d o cy P  rerd v iv i)D e r  i)R r v i dtr ) D d r o P  di tr d  v ik D dR r D
Ai)&r R r rd rdR r)r o r)D dr d k pr) v rpApd rk rv "
6idrd iv D eD rd &r(.r  d o cy P  rrk r(  i&pr( rk rR rR rp rR p)rd &i)pd D
 i&rr D Aiv &rR r rdR r)r o r)D drd  rR p idrd o r)D drd k rD d  i(D dr rArR
D erR rerd  i&rr D Aiv &rR r rdR r)r o r)D drd d Dr co DP rd o r)D drd c0r co DP "
zyy1 c%! # * 3.%! # * ( %$! (!
c idp)pR  p)&z +18 /8 , rr &i&i) rAr o idD  rd R iedD e  i)rdr d tr d  rArR
v idrdp eirv rdr d o r)D dr d ezv ApR i)% rdR r)r k rD d
/, , o P  d i ! &&Ad D
c iv &rdo D )D r o P  d i rR rp k rk p k D dR r o r)D drd idrd &rdtr edtr
rR r'rR r  i(D dr k rk p k D dR r o r)D drd tr d rR rd r)D Aidpdr tr d 
R i)rR r) v ido rD R D re rArR v r pe ei rk rv  D  R iv o r)D drd"
1, #c;pce r ! &&Ad D
c iv &rdo D )D o r)D drd idr d Pr)r v ik reper d o c;pce r  i&rdtr e '
&rdtr edtr R i)(rrA  i&pr( k rtr drd o r)D dr d tr d  D  iD rerd zk i(
 i&pr( i d cDr  i(D dr o c;pce r tr d  rR rd r)D Ar)r Aidpdr R i)rR r )
R D re rArR D k rtr d D zk i( k rtr drd R i) i&pR "
3, &o r viPDDd D
c i)pArer d  prR p A)z i pdR pe v idPr) D '&o r Arr  prR p o r)D drd
ezv ApR i) tr d  R i)&per rd rArR D k reperd  i)rdr d" 4r D k e iPDDd D

18
R i) i&pR rerd D rArR erd k iR re eik iv r(rd  D  R iv R i) i&pR "  rr
r r)dtr  D  R iv '&o r e iPDDd D v pr( pdR pe D iR ie D % drv pd
Aidti )r d rerd v idpdr erd &i)&rr D v iR zi pdR pe v idti v &pdtD erd
 i)rdr d R i) i&pR "
5, 6tv'&& d D
6tv'&& d D o pr D eidrk  i&rrD v&po ic PAAo ce e e '&& d D1 tr D R p
Aiv rk  prd rk rv rR  Aidti )r d  i(D dr  r r)r d v idr drA rk rv rR 
Aidti )r d rrk r( rk rv rR  r)D -&e r D rk rv Dcr y &o z "
c rer rk rv  i&pr( Aidrv rdr d o r)D drd (r)p v iv Ai)(r R D erd 3 r Aie
tr d  v pdeD d R i)o rD % tr D R p
/, 0 D  D ez rd R D derR &r(rtr + o d e z , tr D R p v idtr R rer d  i&i)r Ar &i r)
eiv pdeD drd D v rdr Aidtp  pA + d Dr o pAco , &i)(r  D k v idre i ezv ApR i)
rk rv  prR p o r)D drd"
1, #dPrv r d + r -o cPr / tr D R p v idtr R rerd  i&pr( rdPrv rd tr d  rR rd r)D
 i iz)r d tr d  v iv Apdtr D eiD dD drd pdR pe v iv Ai)zk i( re i d   cP
ei rk rv  prR p o r)D drd ezv ApR i)  izk r( ' zk r( v iv Apdtr D zR z)D R r
R i)(rr A o r)D drd R i) i&pR "
3, yi)r Ap(rd  D  R iv + p Dco P)d  d r ( , tr D R p v idtr R rer d  i&i)r Ar eprR  D  R iv
eirv rdr d  prR p o r)D drd ezv ApR i) tr d  D v D k DeD r)D  i iz)r d r)D k pr)
 D  R iv tr d  &i)p r(r v iv Ai)zk i( re i d   cP R i)(rr A o r)D drd
ezv ApR i) R i) i&pR "
zyzy e% $! ('  6%)# ' # $!
yi)r der Aiv D eD )rd rrk r( A)z i D v rdr Aidik D R D rd D v pk rD r)D
v idrArR er d Ai)v r rk r (rd  rv ArD idr d zeiv idR r D Aidik D R D rd"  D rk rv
ei)r der Aiv D eD )rd rk rv Aidik D R D rd eirv rdr d o r)D drd D dD tr D R p
/, 7r R r) &ik rerd Ai)v r r k r(rd rrk r( R r(rA pR rv r v ididrk D
Ai)v r r k r(rd tr d rerd D o rD erd z&o ie Aidik D R D rd"
1, a p)iD  D  Riv o r)D drd tr d  rr% v idi drk D o idD  'o idD   i)rdr d o r)D drd
rd v idPr) D v iR zi Aidrv drd tr d  R iArR "
3, & i)r  D rrk r( R r(rA v ik reperd v idrk rv D (r D k  p)iD tr d  R ik r(

1/
D k reperd tr d  &i)er D R rd idrd o r)D drd &dD i) D R r a r(D  a p)rer)R r "
5,  i)rdP rdrd  D  R iv rrk r( R r(rA v idi rD d Aidrv rdr d o r)D drd tr d 
rerd D R i)rAerd"
=, v Ak iv idR r D rrk r( R r(rA v ik reperd Aidi) rArd Aidr v rdrd o r)D dr d
pdR pe v idrR r D Ai)v r r k r(rd tr d  rr"
9, 6zepv idR r D rrk r( R r(rA v iv &prR Aik z)rd Aidik D R D rd rR rp Aiv &peprd
tr d  &i)R po prd pdR pe v idi R r(pD (r D k Aidik D R D rd D eiv pD rd (r)D "
yiR i) rdrd ei)rder &i)D eD ) k i&D ( k rdo pR rArR D k D (rR Arr nrv &r) 1"3"
nrv &r) 1"3 yi)rder  iv D eD )rd