摘要
入侵检测系统(IDS)需要根据每个模式串的权值,计算给定主串的总权值并反馈给报警系统。传统的模式匹配算法在计算主串权值时效率低。为此,文中在Aho-Corasick算法的基础上,提出了带权模式匹配算法(WPM)及其改进算法(WPME)。算法优化了自动机的建立过程,对自动机每个节点的失配后继指针信息和匹配量信息进行预处理,从而避免了模式匹配阶段在计算主串权值时的回溯操作,降低了算法的时间复杂度。实验表明,改进后的算法具有效率高、匹配精确的特点。
Intrusion Detection System （IDS） needs to calculate the total weight of the main string and send the result to the alarm system based on the weight of each pattern string. A Weighted Patterns Matching （WPM） algorithm is proposed, which is efficient on receiving the weight of the main string based on AC algorithm. The proposed algorithm achieves information such as the subsequence pointers and matching times for each state during building automata. Therefore, the proposed algorithm reduces the time complexity by reducing the backtracking times when calculating the total weight of the main string in pattern matching stage. Experimental results show that the algorithm has advantages in efficiency, matching accuracy.
出处
《计算机技术与发展》
2014年第2期160-163,共4页
Computer Technology and Development
基金
国家自然科学基金资助项目(61170108)
浙江省新苗人才计划基金资助项目(2011R404018)
关键词
入侵检测系统
带权模式匹配
自动机
报警系统
intrusion detection system
weighted patterns matching
automata
alarm system
