改进BM算法及其在网络入侵检测中的应用  

Improved BM Algorithm and Its Application in Network Intrusion Detection

作　　者：孙文静[1,2] 钱华 

机构地区：[1]南京理工大学,南京210094 [2]南京审计学院,南京210029 [3]南京联迪信息系统有限公司,南京210019

出　　处：《计算机科学》2013年第12期174-176,共3页Computer Science

基　　金：国家发改委发改办[2012]3179号下一代互联网络扫描与补丁管理系统产业化项目基金资助

摘　　要：传统BM算法存在一些无用的比较,影响了字符串的匹配速度,降低了入侵检测效率。为此,提出一种改进BM算法,并将其用于网络入侵检测系统的检测引擎中。实验结果表明,较采用BM算法的Snort检测器,改进BM算法构建的网络入侵检测系统可有效降低误报率和漏报率,提高入侵检测率与时间利用率。显然,这对提升网络入侵检测系统的整体能力非常有用。The traditional BM algorithm has some useless comparison, affecting the string matching speed and reducing the efficiency of intrusion detection. Therefore, this paper proposed an improved BM algorithm, applied it to the engine of network intrusion detection system. Experimental results show that, compared with BM algorithm which employs Snort detection, a network intrusion detection system constructed by improved BM algorithm can effectively reduce the false positive rate and false negative rate,and improve intrusion detection rate and time utilization. Obviously, this net- work intrusion detection system is very useful for enhancing the overall capacity.

关 键 词：入侵检测 改进BM算法 检测效率 误报率与漏报率 

分 类 号：TP311[自动化与计算机技术—计算机软件与理论]