摘要
本文提出了一种新的用于构造入侵检测模式匹配自动机的方法。该方法从构造判定单个模式的NFA自动机入手,通过集成单个的NFA而得到全集的NFA,并将全集NFA转换为与之等价的DFA并化简,从而可得到全集的确定型模式匹配有限自动机。由于该方法可以完全自动完成,从而可以方便地为入侵检测系统构造模式匹配自动机。
A new method, which can be used in constructing pattern matching automaton for Intrusion Detection System is proposed in this pa per. By starting from constructing single pattern matching NFA for every single pattern, then integrating the all constructed NFA into full-pattern NFA, converting the full-pattern NFA into its equivalent DFA, and simplifying the DFA, a DFA serving as an engine for Intrusion Detection System can be constructed.
出处
《微型电脑应用》
2006年第5期10-12,2,共3页
Microcomputer Applications
关键词
入侵检测系统
确定型有限自动机
非确定型有限自动机
等价性
Intrusion Detection System deterministic finite automaton (DFA) nondeterministic finite automaton (NFA) e-quivalence
