Research On Application Of Improved Pattern Matching Algorithm Based On Intrusion Detection System

With the popularization and fast development, network occupy the more important position in the life of people, at the same time, the security problem which network cause make more and more people notice, every year because of safe problem in network, for example, hacker invades, the virus infection etc. these result in economic expense which increase annually, it has attained thousands of million dollar, this will require we must pay attention to the network security. As a kind of active network security protection technology, intrusion detection system not only detects the intrusions and responses vicious behavior of using host and network resources.Firstly, this thesis analyses and summarizes the current status of intrusion research, focuses on research and practice on intrusion detection system algorithm which is technique difficulties in network intrusion detection, and discuss all kinds of popular IDS algorithms, at the same time, we analysis the virtue disadvantage of them. Secondly, pattern matching algorithm is central algorithm in signature based intrusion detection system. Performance of this intrusion detection system is dominated by pattern matching algorithm used. This thesis survey the pattern matching algorithm such as BF,BM,KMP single algorithm, AC multi-pattern matching and analysis the performance of them. At last, we provide some improvement for this algorithm. Lastly, the thesis puts forward a new design scheme intrusion detection system systematically, which would be of some hint to the other systems alike. Great emphasis was put in key modules such as data collecting module, protocols processing module, pattern-matching module etc. The conclusion is made on the IDS project, with the shortage and improvement to be made being put forward. At last, this dissertation analyses some problems intrusion detection technical must face and discusses expectation of IDS in future.