摘要： 在实际网络中,入侵数据包只占网络总流量的极少一部分。系统资源的消耗主要不是在对入侵包的检测,而是在对正常数据包的穷举匹配。针对这一实际情况,提出并实现了一种新的匹配算法。该算法采用两次匹配的思想,大幅度地提高了系统的检测速率。

关键词: 入侵检测, 模式匹配, 多模式匹配

Abstract: Malicious packs are only a little portion of the overall flow in the real network.Most system resources are consumed on the fully matching normal packs,instead of the detection malicious packs.This paper introduces and realizes a new matching algorithm.The algorithm adoptes twice matching method,greatly improves the detective efficiency of the system.

中图分类号: 

• TP393.08