Research On Pattern Matching Algorithm And Its Applying To The Detection Of The Phone Virus

In recent years,smart phones have become the first choice and the necessities in the people's communication.However,due to the user's private information stored on the phone,it brings people convenience,but also implies a lot of security risks.The most common is the threat posed by the mobile phone virus.Its invasion not only affects peoples' daily lives,but also leads to malicious theft of mobile phone number,tariff and other economic problems,and even leads to the disclosure of the information on cell phone,and leads to a series of privacy security issues.For this problem,the current methods to prevent phone viruses mainly includes:the mobile makers' safety measures,the security measures on the network side by the operator and the users' measures.Measures on the network side have a number of advantages,regardless of the mobile operating system,having a rapid reaction for the new virus,without user involvement.However,the system on the network side of the mobile phone is required to have highly efficient processing performance,otherwise,in a high speed network,it will lose lots of packet.This paper proposed a network-side mobile virus detection system.The implementation was based on snort which is a network intrusion detection system,using an improved multi-pattern matching algorithm and can be effective on detecting mobile phone viruses in the case does not affect the user's communication.This paper focused on the following two aspects:(1)This paper proposed an efficient extended algorithm E-AC-BM on the basis of AC-BM algorithm.This algorithm can deal with a virus containing multiple virus rules.Experiments proved that the algorithm has a faster processing speed,and is suitable for using in the high-speed network.(2)On the architecture of network intrusion detection system and the efficient multi-pattern matching algorithm E-AC-BM algorithm,a practical phone virus detection system and its implementation technology in high speed network was proposed.The design of the program is reasonable,so that the system has a high processing speed,and has a high efficiency of detecting packet for using efficient multi-pattern matching algorithm,thus it can reduce the lost packet situations and reduce attack-missing.