摘要
对入侵检测中模式匹配的方法进行了研究,分析了当前常用的模式匹配方法的弱点与不足,提出了一种基于三叉树结构的自动机方法,较好的避免了传统树型结构中由于节点数目变化而导致的不便。此外,利用匹配失败的信息,实现了跳跃匹配,提高了模式匹配的速度。*
This paper studies the method of pattern matching in intrusion detection, analyzes the fault and lack of the current usual methods and presents a trinary-tree-based automation method, which avoids some lacks resulting from the changing of the node amount in traditional tree structure. In addition, during matching this method jumps some letters with unsuccessful information, which improves the speed.
出处
《通信学报》
EI
CSCD
北大核心
2004年第1期61-69,共9页
Journal on Communications
基金
"863"计划基金资助项目(2001AA142030)
关键词
网络安全
入侵检测
模式匹配
协议分析
自动机
三叉树
network security
intrusion detection
pattern matching
protocol analysis
automation