Design And Implementation Of Intrusion Detection Systems Based On Pattern Matching And Protocol Analysis

With the development of information technology and the wide application of network technology, network security becomes critical. Following the firewall, data encryption, and other security measures, intrusion detection systems are going to be a new generation of security technology. The traditional intrusion detection systems have some flaws and limitations. For example, the pattern string matching algorithm which the system uses has low efficiency. To protect the security of Internet users in public places, the paper provides an intrusion detection system based on pattern matching and protocol analysis. Specific research contents are as follows:1) Since the pattern matching algorithm which the intrusion detection systems uses before has low efficiency, the paper provides a pattern matching algorithm based on BM. The improved pattern matching algorithm can effectively reduce the number of matches and the number of moves of the string, hence the system efficiency is improved.2) Protocol analysis method is applied in intrusion detection systems, and combined with pattern matching method. The paper describea the design and implementation process of the system module in detail.3) In response to the large amount of data packets in high-speed network, the storage module of the system, creates a thread to handle the operation of the database in the main process, in order to reduce the consumption of system resources. The second is the introduction of the queue saving temporary information, to implement communication between the main process and the thread.