摘要： 针对当前串匹配型入侵检测系统普遍面临的效率问题,从规则库结构、串匹配算法及应用层协议分析等方面入手进行优化,设计并实现了高效率的串匹配型入侵检测系统SpeedIDs,并将测试结果与Snon系统进行了对比。

关键词: 入侵检测, 串匹配, 规则库, 协议分析

Abstract: The efficiency of content-based intrusion detection systems, the structure of the signature library, the string matching algorithms and the analysis of application level protocols, has been regarded as the most crucial topic for extensive research. This paper introduces SpeedlDS, an efficient experimental content-based IDS. After an overview on several important aspects of design and implementation in which SpeedlDS distinguishes itself from other IDSs are particularly discussed. Experiments are also presented to test the effectiveness and results are proved promising by excelling Snort, a famous and widely used IDS.

中图分类号: 

• TP393.08