Anzeige
Erschienen in:
2006 | OriginalPaper | Buchkapitel
A Fast Pattern-Matching Algorithm for Network Intrusion Detection System
verfasst von : Jung-Sik Sung, Seok-Min Kang, Taeck-Geun Kwon
Verlag: Springer Berlin Heidelberg
Aktivieren Sie unsere intelligente Suche, um passende Fachinhalte oder Patente zu finden.
Wählen Sie Textabschnitte aus um mit Künstlicher Intelligenz passenden Patente zu finden. powered by
Markieren Sie Textabschnitte, um KI-gestützt weitere passende Inhalte zu finden. powered by
We present a multi-gigabit rate multiple pattern-matching algorithm with TCAM that enables protecting against malicious attacks in a high-speed network. The proposed algorithm significantly reduces the number of TCAM lookups per payload with
m
-byte
jumping window
scheme. Due to the reduced number of TCAM lookups, we can easily achieve multi-gigabit rate for scanning the packet payload in order to inspect the content. Furthermore, multi-packet inspection is achieved easily by the extended state transition diagram with the
shifting distance
. With experimental results, we have clearly justified the proposed algorithm works well for a multi-gigabit network intrusion detection system.