modesecurity 的特征：

https://github.com/SpiderLabs/owasp-modsecurity-crs/tree/master/base_rules

snort的规则：

http://cs.uccs.edu/~cs591/ids/snort/snort2_9_0/rules/web-iis.rules