模式匹配在网络安全中的研究  

Study on Pattern Matching in Network Security

作　　者：徐东亮[1] 张宏莉[1] 张磊[2] 姚崇崇 

机构地区：[1]哈尔滨工业大学计算机科学与技术学院,哈尔滨150001 [2]河南大学数据与知识工程研究所,开封475004

出　　处：《电信科学》2015年第3期115-123,共9页Telecommunications Science

基　　金：国家重点基础研究发展计划("973"计划)基金资助项目(No.2011CB302605);国家高技术研究发展计划("863"计划)基金资助项目(No.2011AA010705;No.2012AA012502;No.2012AA012506);国家科技支撑计划基金资助项目(No.2012BAH37B01);国家自然科学基金资助项目(No.61202457;No.61402149)~~

摘　　要：模式匹配模块是网络安全系统的核心模块,其系统资源占用率最高时可达70%以上。针对模式匹配在当前网络安全系统中面临的问题和挑战,以2000年为界将模式匹配方法分为传统模式匹配方法和新模式匹配方法,通过分析不同模式匹配方法的原理、计算复杂度和新模式匹配方法的发展与演化过程,得出不同方法的适用环境,对模式匹配技术在网络安全系统中的作用进行了全面综述和评价,最后对未来的研究方向进行了总结和展望。Pattern matching is the core module in network security system, it＇s the highest occupancy rate of system resources is more than 70%. According to problem and challenges of pattern matching in the network security system, taking 2000 as the boundary, the pattern matching was divided into the traditional pattern matching method and the new pattern matching method. Through the analysis of the principle and the computational complexity of different pattern matching method and the development and evolution of the new pattern matching method, applicable environment of different methods was concluded. A comprehensive review and evaluation of pattern matching in network security system was presented. Finally, a conclusion and some suggestions for future research were summarized and prospected.

关 键 词：模式匹配 入侵检测 网络安全 

分 类 号：TN919.81[电子电信—通信与信息系统]