多模式匹配及其改进算法在协议识别中的应用

Multi-pattern Matching and Application of Improved Algorithm to Protocol Identification

随着网络的高速发展,使得信息安全问题日益严峻,传统的很多协议识别技术已经无法应对不断出现的网络威胁,作为内容过滤和检测的关键技术之一,同时也是传统的字符串算法中被重点研究的对象之一,模式匹配算法成为当今研究热点。首先介绍了多种单模匹配算法及其存在的缺陷,然后在Aho-Corasick多模式匹配算法基础之上进行了改进,并将该算法应用于协议识别中,最后简单分析了协议识别中模式匹配算法未来的研究方向。

With the high speed of network, the problem of information security is becoming more and more serious, many of the traditional protocol identification technology has been unable to deal with the continuously arising network threats, as one of the key technologys of content filtering and detection, and also as one of the objects of study on traditional string algorithm, pattern matching becomes the research hot spot. In this paper, at first, several single pattern matching algorithm and their flaws are introduced. Secondly, based on Aho-Corasick multi-pattern matching algorithm, it is improved, and the algorithm will be applied in the protocol identification. At last, the future research directions of pattern matching algorithm in protocol identification is analyzed.