入侵检测系统中模式匹配算法的研究

Study of Pattern Matching Algorithms in Intrusion Detection System

入侵检测是网络安全的最后一道防线,模式匹配算法是基于特征匹配的入侵检测系统中的核心算法,模式匹配的效率决定这类入侵检测系统的性能。本文对入侵检测系统中的模式匹配算法进行了综述,包括经典的单模式匹配算法--KMP算法、BM算法、RK算法和多模式匹配AC算法。对各种算法的性能进行了分析。最后提出了改进模式匹配算法效率的研究方向。

Intrusion detection is the last defence of network security.Pattern matching algorithm is central algorithm in signature based intrusion detection system.Performance of this intrusion detection system is dominated by pattern matching algorithm used.A survey of pattern matching algorithm is given,classical single pattern matching algorithm such as KMP.BM.RK and multi- pattern matching algorithm of AC is introduced. Performance of every algorithm is analysed.In the end,research direction of improved oattern matching algorithm is given,