摘要
为克服通用入侵检测框架模型（GIDF）及其各组成部分在设计和实现中存在的弱点，在对一个开放性入侵检测系统软件Snort进行分析的基础上，提出增加宽度搜索与动态选项链表相结合的规则匹配操作优化算法；实验表明，改进后的系统通过增加宽度搜索提高了选项匹配的并行性；通过采用动态选项链表优化了规则匹配的顺序，缩短了深度搜索的深度，从而从整体上切实提高了Snort的检测速度。
To overcome the weakness of the generic intrusion detection framework（GIDF） and its various components in design and implementation, a rule-base optimization algorithm is proposed based on the analysis of the open-system Snort. Experiments show that the parallelizability of option matching is improved by adding the width-searching,and the depth of rule matching is shortened by adjusting dynamically the sequence of rules. Thus, the overall performance of Snort is enhanced effectively.
出处
《计算机应用与软件》
CSCD
北大核心
2007年第12期202-204,共3页
Computer Applications and Software
