摘要
网络入侵检测系统的性能一定程度依赖于精确、快速的模式匹配技术。随着网络速度的快速增长,模式匹配技术必将成为入侵检测系统性能的瓶颈。首先介绍了网络入侵检测系统Snort中采用的多模式匹配算法,进而提出了一种改进的多模式匹配算法。实验结果表明,改进后的算法降低了时间复杂度,提高了系统检测效率。
The performance of the Network Intrusion Detections Systems (NIDS) often relies on exact and fast pattern matching techniques. With the increasing of network speeds and traffic, the pattern matching techniques may become a performance bottleneck. A faster multi-pattern matching algorithm which is used in Snort, and present an improved multiple-pattern matching algorithm are introduced. The improved algorithm can reduce time complexity and increase the checking efficiency of the system by experiment.
出处
《科学技术与工程》
2005年第13期914-916,920,共4页
Science Technology and Engineering
基金
东莞科研发展基金(20040023)国家自然科学基金(60273070)湖南省2004年科技攻关项目(04gk3022)资助
关键词
入侵检测
模式匹配
多模式匹配算法
intrusion detection pattern matching multi-pattern matching algorithm
