The Research Of Pattern Matching Algorithm In Network Intrusion Detection System

With the development of network, users of the network are facing increasingly serious security problems. Among the issues, the network intrusion has become the most serious threat to the computer security. So network intrusion detection system appears as the hotspot in the computer security research field. Intrusion detection system is a new type of safety protection technology after traditional security protection method such as firewall, data encryption and so on. But, there are many challenges in the network intrusion detection system. How to improve the efficiency to meet the requirement of communication becomes the typical problem. Pattern matching algorithm is a core technology of the rule-based intrusion detection system. It directly influences the accuracy and real-time performance of the system. And it plays an important role in the process of the intrusion detection system.This paper begins with the analysis of network intrusion detection and the Snort intrusion detection system .Then, this paper analyses the Pattern matching algorithm of the network intrusion detection system, and select the BM algorithm to research by comparing. On this basis, this paper presents a PBM Pattern matching algorithm based on a combination of BM, BMH and BMHS algorithm. Experimental results show that PBM Pattern has higher efficiency comparing with the BM algorithm. In the last, this paper takes advantage of the PBM algorithm to design and improve the detection engine under the Linux based on Snort, and also takes the improved system into use. The result has reference function for researching of the intrusion detection system.