The Improved AC High-Performance Pattern-Matching Algorithm for Intrusion Detection

被引:0
|
作者
Xu, Dongliang [1 ]
Zhang, Hongli [1 ]
Hou, Miao [1 ]
机构
[1] Harbin Inst Technol, Sch Comp Sci & Technol, Harbin 150006, Peoples R China
关键词
NIDS; attacks; AC; pattern-matching;
D O I
暂无
中图分类号
TP [自动化技术、计算机技术];
学科分类号
0812 ;
摘要
Network Intrusion Detection Systems (NIDS) have become widely recognized as powerful tools for identifying, deterring and deflecting malicious attacks over the network. New generations of network intrusion detection systems create the need for advanced pattern-matching engines. This paper proposes an improved AC algorithm, called Semi-AC. We contribute modifications to the Aho-Corasick string-matching algorithm that drastically reduce the amount of memory required. Its efficiency is close to the standard AC, but the space is saved 50% or more.
引用
收藏
页码:200 / 213
页数:14
相关论文
共 50 条
  • [1] High-performance pattern-matching for intrusion detection
    van Lunteren, Jan
    [J]. 25TH IEEE INTERNATIONAL CONFERENCE ON COMPUTER COMMUNICATIONS, VOLS 1-7, PROCEEDINGS IEEE INFOCOM 2006, 2006, : 1409 - 1421
  • [2] The Research and Amelioration of Pattern-matching Algorithm in Intrusion Detection System
    Wu, Pei-fei
    Shen, Hai-juan
    [J]. 2012 IEEE 14TH INTERNATIONAL CONFERENCE ON HIGH PERFORMANCE COMPUTING AND COMMUNICATIONS & 2012 IEEE 9TH INTERNATIONAL CONFERENCE ON EMBEDDED SOFTWARE AND SYSTEMS (HPCC-ICESS), 2012, : 1712 - 1715
  • [3] A fast pattern-matching algorithm for network intrusion detection system
    Sung, Jung-Sik
    Kang, Seok-Min
    Kwon, Taeck-Geun
    [J]. NETWORKING 2006: NETWORKING TECHNOLOGIES, SERVICES, AND PROTOCOLS; PERFORMANCE OF COMPUTER AND COMMUNICATION NETWORKS; MOBILE AND WIRELESS COMMUNICATIONS SYSTEMS, 2006, 3976 : 1157 - 1162
  • [4] Improved Algorithm of pattern matching for Intrusion Detection
    Liu Zhen
    Xu Su
    Zhang Jue
    [J]. MINES 2009: FIRST INTERNATIONAL CONFERENCE ON MULTIMEDIA INFORMATION NETWORKING AND SECURITY, VOL 2, PROCEEDINGS, 2009, : 446 - 449
  • [5] An Improved Pattern Matching Algorithm in the Intrusion Detection System
    Zhang Ping
    Liu Jianghui
    [J]. MEASURING TECHNOLOGY AND MECHATRONICS AUTOMATION, PTS 1 AND 2, 2011, 48-49 : 203 - +
  • [6] Distributed Hierarchical Pattern-Matching for Network Intrusion Detection
    Baig, Zubair
    Salah, Khaled
    [J]. JOURNAL OF INTERNET TECHNOLOGY, 2016, 17 (02): : 167 - 178
  • [7] An improved AC pattern matching algorithm
    Jia, Mo
    Chen, Mel
    Li, Hui
    [J]. INFORMATION TECHNOLOGY APPLICATIONS IN INDUSTRY II, PTS 1-4, 2013, 411-414 : 1594 - 1597
  • [8] A pattern-matching co-processor for network intrusion detection systems
    Clark, CR
    Schimmel, DE
    [J]. 2003 IEEE INTERNATIONAL CONFERENCE ON FIELD-PROGRAMMABLE TECHNOLOGY (FPT), PROCEEDINGS, 2003, : 68 - 74
  • [9] Performance Evalution of TCAM based Pattern-Matching Algorithm
    Sung, Jung-Sik
    Kwon, Taeck-Geun
    Huh, Jaedoo
    [J]. 68TH IEEE VEHICULAR TECHNOLOGY CONFERENCE, FALL 2008, 2008, : 741 - 745
  • [10] A STRING PATTERN-MATCHING ALGORITHM
    CHANG, DK
    [J]. JOURNAL OF SYSTEMS AND SOFTWARE, 1993, 22 (03) : 207 - 216