面向入侵检测的模式匹配算法研究

Research with Pattern Matching Algorithms for Intrusion Detection

在入侵检测系统的实现中,关键部分是检测引擎的实现。而在检测引擎的实现中,关键的是数据分析模块。对于基于规则的入侵检测来说,模式匹配算法非常重要,它直接影响到系统的准确性和实时性能。论文主要研究了BruteForce算法,Boyer-Moore算法,Aho-Corasick算法,Set-wiseBoyer-Moore-Horspool算法,Aho-Corasick_Boyer-Moore算法。

In the implementation of intrusion detection system,the key module is the detection engine.And the key module to the detection engine is the data analysis module.For the rule-based intrusion detection system,pattern match-ing algorithms are very important.They directly influence the accuracy and real-time performance of IDS.In this paper,Brute Force algorithm,Boyer-Moore algorithm,Aho-Corasick algorithm,Set-wise Boyer-Moore-Horspool algorithm and A-ho-Corasick_Boyer-Moore algorithm are studied.