Study Of Pattern Matching Algorithms For Network Intrusion Detection

The technology of Intrusion Detection is presented under the situation that traditional. security strategies are demand. Because network is incapable of satisfying ever increasingly rigorous developing with unbelievable rate and network technology changes quickly, large-scale network and 1000Mbps Ethernet appear. Current NIDS (Network Intrusion Detection System) can hardly catch up with thespeed of network so that conventional detection method face to serious challenge.Intrusion Detection technology is that one kind protects oneself form a kind of network safe practice attacked voluntarily,continue the security technology of new generation after the traditional safe protective measure, such as fire wall, the data encrypted etc.As rational supplement of fire wall, invade detection technique can help the system to deal with attack of network, expand security managerial ability of system manager, raise the integrality of the safe infrastructure of the information.Pattern matching algorithm is central algorithm in signature based intrusion detection system. Performance of this intrusion detectin system is dominated by pattern matching algorithm used.This dissertation survey the pattern matching algorithm such as the simple algorithm,KMP algorithm,BM algorithm single algorithm, AC algorithm ,AC-BM algorithm multi-pattern matching algorithm and analyse the performance of them. At last,we provide some improvement for these algorithms.At last, this dissertation analyses some problems intrusion detection technical must face and discusses expectation of NIDS in future.