基于ACBM的高速网络入侵检测算法研究

Research on High Speed Network Intrusion Detection Algorithm Based on the ACBM Rules Matching

本文提出一种基于ACBM规则匹配的网络入侵算法,通过定义入侵规则,将入侵数据与数据库中的数据规则化,然后根据ACBM算法实现入侵规则的匹配,这样就避免了传统算法对单一数据串的逐一匹配,大大缩短了高速网络检测所消耗的时间.实验证明,这种方法能够有效提高网络入侵检测的效率,对高速网络的检测效率也有了很大的改善,取得了满意的结果.

This paper proposes a ACBM rules based on matching network intrusion algorithm,through defining invasion rules and get the invasion data and data in database regularization,then based on the ACBM algorithm to complete the invasion rules matching.This prevents the traditional algorithm for a single data string by the match,greatly reducing the high-speed network detection spending time.Experiments show that the method can effectively improve the efficiency of the network intrusion detection,high-speed network detection efficiency also has made a lot of improvement,and satisfactory results were obtained.