A Quick Pattern-matching Methods For IDS And IPS

Cyber attack, illegal access and computer virus rapid raising with the network prevalent, network security become rigorous. The security and dependability of network have gained much more recognition. Lots of network security mechanism is come into being, such as anti- virus, Firewall, Intrusion Prevention System (IPS), Intrusion Detection Systems (IDS), authentication, access control,etc. Intrusion Detection System is an important security mechanism in an indispensable, is important guard to protect cyber attack. However, because two of important reasons, traditional intrusion detection systems can't effect again. First, With the Fast, Gigabit Fiber emergence of ever-increasing network bandwidth, network traffic is gradually increased, to use the traditional intrusion detection system to complete a full real-time filtering of data streams has become impossible. Secondly, the use of the Internet business and the rapid expansion of the number, network invasion Explosive growth and the way of invasion has become more diverse, intrusion detection rule base has become more and more large, to achieve the rapid rules matching become important challenges to the traditional Intrusion Detection System .For the above Question, This article focuses on the work of intrusion detection systems improve the efficiency of detection of pattern matching algorithm. This paper first introduces the principle of pattern-matching algorithm, then comparative analysis of several important current pattern matching algorithm, analysis of the principle of the algorithm.Secondly, On the basis of BM algorithm and some important improvement algorithms,a new improved algorithm-HPMA is presented.The HPMA algorithm combines the merits of the BMH algorithms and the uniqueness of the next character is taken into consideration.The HPMA algorithms greatly enhances the probability of occurrence of the largest right shift,thus improving the matching speed effectively.Finally, According to the principle of algorithm, Using C + + implementation of the algorithm, Test the performance of algorithm, and Comparative Analysis with the other algorithm, and alternative BMH algorithm in Snort. The experimental results show that the algorithm effectively improve the efficiency of the pattern matching.Therefore the new algorithm has a very good value.