Mass Sensitive Information Of Network Traffic Pattern Matching Algorithm

Information security is an important research in the field of computer.Pattern matching algorithm and information security go hand in hand.With the rapid development of Internet,IPv4 protocol is replaced by IPv6 protocol,which lead to more and more users and data exist in the network.In the field of network information security,the real-time characteristic of network traffic and the large-scale characteristic of pattern set make a high degree with the performance of pattern matching algorithm.Depend on the network filter means,the paper studies is divided into two parts.The first point is the pattern matching algorithm which based on sensitive network address.With analysis of two common data structures,an improved algorithm which is based on the Trie structure is proposed.Combined with the characteristics of IPv6,the improved algorithm is implemented with the longitudinal and transverse compression of Trie structure.For ten million Ipv6 addresses,the average search time can reach 1.1 us.Another pattern matching algorithm is process to sensitive URL and non-URL keywords.The improved algorithm is implemented with the Bit-Sample-Splice Hash function and the new review method which contain linked list and Trie structures.Taking into classify thought and the pattern length,Using the compression AC algorithm and short and long-range improved algorithm process the different length pattern.For ten million sensitive keywords,the average match time can reach 0.02 ms.In summary,the improved algorithms provide a new thinking direction to improve pattern matching algorithm and a reliable guarantee to the filtering technology of network sensitive data.