摘要： 分析了snort中采用的Boyer-Moore模式匹配算法，提出了改用更高效的KARP-RABIN模式匹配算法，并对该算法进行了并行化设计，给出了设计代码。实验结果表明可以提高IDS的实时检测性能。

关键词: 入侵检测系统, 模式匹配, 并行, 网络安全

Abstract: Boyer-Moore algorithm used in snort is analyzed. Substitution of Boyer-Moore by more efficient KARP-RABIN algorithm and parallelization design of KARP-RABIN are presented. Pseudo-codes and experiment are also given in this paper. It is shown that real-time detection performance of IDS is improved.

中图分类号: 

• TP393.08