Research Of A High Performance Pattern Matching Algorithm In Intrusion Detection

The technology of Intrusion Detection is presented under the situation that . traditional security strategies are incapable of satisfying ever increasingly rigorous demand. Because network is developing with unbelievable rate and network technology changes quickly, large-scale network and lOOOMbps Ethernet appear. Current NIDS (Network Intrusion Detection System) can hardly catch up with the speed of network so that conventional detection method face to serious challenge. First, basal definition, classification of Intrusion Detection System and the algorithms of Intrusion Detection are given in this paper. The pattern match algorithms are discussed in detail from the aspect of theory and technology. Then, this dissertation proposes a multi-pattern matching algorithm based on the trinary-tree structure. In the algorithm, protocol analysis is given, which utilize the regularity of protocols, in order to increase the speed and accuracy of the pattern matching algorithm, and the trinary-tree structure and the advanced multi-pattern algorithm on it are shown. At last, this paper analyzes the performance of the algorithm and implements it.