Abstract:
Boyer-Moore algorithm used in snort is analyzed. Substitution of Boyer-Moore by more efficient KARP-RABIN algorithm and parallelization design of KARP-RABIN are presented. Pseudo-codes and experiment are also given in this paper. It is shown that real-time detection performance of IDS is improved.
摘要: 分析了snort中采用的Boyer-Moore模式匹配算法,提出了改用更高效的KARP-RABIN模式匹配算法,并对该算法进行了并行化设计,给出了设计代码。实验结果表明可以提高IDS的实时检测性能。
关键词:
入侵检测系统,
模式匹配,
并行,
网络安全
CLC Number:
YU Ling1,CHEN Bo1,2. Pattern Matching Algorithm and Parallelization Design in IDS[J]. , 2004, 30(04): 50-52.
于泠,陈波. IDS中模式匹配算法及其并行化设计[J]. , 2004, 30(04): 50-52.