摘要
首先介绍了模式匹配技术的工作过程,接着分析了B-M匹配算法,进而指出了该技术存在的主要缺点;然后介绍了协议分析技术的检测攻击过程,说明了它的技术优势;最后将两项技术有机结合了起来建立了一个新的检测模型。研究表明,该模型检测速度快、效率高,并且大大降低了漏报率。
Firstly,working process of pattern matching is introduced,and B-M algorithm is analysed,and main disadvantages are pointed out.Then an effective detec- tion method which is called protocol analysis is pro- posed;and its advantage is explained.Finally,based on the two kinds of technologies,the modified model of in- trusion detection is established.
出处
《计算机与数字工程》
2007年第1期97-99,共3页
Computer & Digital Engineering
关键词
模式匹配
协议分析
入侵检测
pattern matching
protocol analysis
intrusion detection