Abstract:
Malicious packs are only a little portion of the overall flow in the real network.Most system resources are consumed on the fully matching normal packs,instead of the detection malicious packs.This paper introduces and realizes a new matching algorithm.The algorithm adoptes twice matching method,greatly improves the detective efficiency of the system.
摘要: 在实际网络中,入侵数据包只占网络总流量的极少一部分。系统资源的消耗主要不是在对入侵包的检测,而是在对正常数据包的穷举匹配。针对这一实际情况,提出并实现了一种新的匹配算法。该算法采用两次匹配的思想,大幅度地提高了系统的检测速率。
关键词:
入侵检测,
模式匹配,
多模式匹配
CLC Number:
TAN Hansong,PENG Shili. A New Fast Algorithm for Matching Multiple Patterns[J]. , 2005, 31(18): 129-130.
谭汉松,彭诗力. 一种新的快速多模式匹配算法[J]. , 2005, 31(18): 129-130.