论文部分内容阅读
模式匹配算法是入侵检测系统(IDS)中非常重要的一种算法.在研究和分析几种常用模式匹配算法的基础上,提出一种快速的基于BM(Boyer-Moore)模式匹配的改进算法—–IBM算法.该算法充分利用模式串的末字符和末字符所对应的文本串的后两字符的唯一性,同时参考文本串本身的信息来提高模式串的移动量,使得每次失配后,在保证不丢失匹配成功可能性的前提下尽可能多地向后跳跃.实验结果表明,该算法相比其他模式匹配算法,在检测性能和匹配效率上均具有很大优势,并且能够有效地提高IDS的检测效率和性能.
Pattern matching algorithm is a very important algorithm in Intrusion Detection System (IDS) .On the basis of researching and analyzing several popular pattern matching algorithms, this paper proposes a fast improved Boyer-Moore pattern matching algorithm - -IBM algorithm.This algorithm makes full use of the uniqueness of the last two characters of the last character of the pattern string and the last character of the text string and improves the movement of the pattern string with reference to the information of the text string itself so that after each mismatch , Jumping backwards as much as possible without losing the possibility of successful matching.Experimental results show that the proposed algorithm has great advantages in detection performance and matching efficiency compared with other pattern matching algorithms and can effectively Improve IDS detection efficiency and performance.