期刊文献+

入侵检测中一种新的快速字符串匹配算法 被引量:10

A New Fast String Matching Algorithm for Intrusion Detection
下载PDF
导出
摘要 基于字符串匹配的检测方法是入侵检测系统中一类很重要的分析方法。文章首先分析了现有的几种准确字符串匹配算法,然后提出了一种新的多模式字符串匹配算法,并且分析了这些算法的复杂性。最后,文章用具体的实验数据来验证这些算法的性能。通过实验可以看出,新算法使得检测速度大大提高,签名容量大大增加。 String matching algorithms are very important analyzing methods in intrusion detection.This paper analyzes some existing string matching algorithms and related researches,and then presents a new multi patterns string matching algorithm.It shows analytically and experimentally that the new algorithm is faster in searching large sets of patterns.
作者 宋华 戴一奇
出处 《计算机工程与应用》 CSCD 北大核心 2003年第32期48-51,89,共5页 Computer Engineering and Applications
基金 国家973基础研究发展规划项目(编号:G1998030409)
关键词 入侵检测 签名匹配算法 多模式字符串匹配算法 Intrusion detection,Signature matching algorithms ,Multi patterns string matching algorithms
  • 相关文献

参考文献11

  • 1..http ://www.securitywizards.com,.
  • 2L T Habergeon,G V Dias,K N Levitt et al.A Network Security Monitor[C].In:Proceedings of the 1990 IEEE Symposium on Research in Security and Privacy.Oakland,CA, 1990-05:296-304.
  • 3Paxson V Bro.A System for Detecting Network Intruders in RealTime[C].In:Proceedings of the 7th USENIX Security Symposium,San Antonio,TX, 1998-01.
  • 4Martin Roesch.Snort-Lightweight Intrusion Detection for Networks[C]. In: USENIX LISA Conference, 1999-11.
  • 5R S Boyer,J S Moore.A fast string searching algorithm[J].Comm ACM, 1977 ;20(10) :762-772.
  • 6A Aho,M Corasick.Efficient string matching:an aid to biliographic search[J].Comm ACM, 1975; 18.
  • 7B Commentz-Walter.A string matching algorithm fast on average[C]. In:Proc Of the 6 th Int Colloq On Automata,Languages ,and Programming, 1979.
  • 8E Ukkonen.On-line constraction of suffix trees[J].Algorithmica, 1995; 14(3) :249-260.
  • 9A Apostolico,R Giancarlo.The Boyer-Moore-Galil string searching strategies revisited[J].SIAM J Comput, 1986; 15 ( 1 ) :98-105.
  • 10C Jason Coit,Stuart Staniford,Joseph McAlemey.Towards faster patern matching for intrusion detection or exceeding the speed of snort [C].In:DARPA Information Survivability Conference and Exposition, 2001.

同被引文献34

引证文献10

二级引证文献31

相关作者

内容加载中请稍等...

相关机构

内容加载中请稍等...

相关主题

内容加载中请稍等...

浏览历史

内容加载中请稍等...
;
使用帮助 返回顶部