一种面向云中心网络入侵检测的多模式匹配算法  

Design and Implementation of A Multi-pattern String Matching Algorithm in Cloud Center Network Intrusion Detection System

作　　者：赵国锋[1] 叶飞 姚永安[1] 赵岩 

机构地区：[1]重庆邮电大学通信与信息工程学院,重庆400065

出　　处：《信息网络安全》2018年第1期52-57,共6页Netinfo Security

基　　金：国家自然科学基金青年基金[61402065]

摘　　要：云中心网络的流量和字符串模式集规模非常庞大,给入侵检测系统带来巨大挑战。为了解决WM(Wu-Manber)多模式串匹配算法匹配效率和匹配成功率较低的问题,同时降低最短模式串长度对算法匹配的影响,文章提出了一种基于WM算法的改进算法——IS_WM(Improved Sunday Wu-Manber),该算法在经典WM算法的基础上,利用字符块跳跃思想以及字符漏匹配思想,使匹配窗口在匹配失效时跳跃移动更大的距离,减少无谓的匹配次数,提高了模式串匹配效率。通过数据测试和搭建敏感词过滤实验系统,表明IS_WM算法具有更低的时间复杂度且匹配效率高,有利于提高云中心网络入侵检测系统的敏感词检索、过滤的能力。Cloud center network traffic and string pattern set scale is very large, bring great challenge to intrusion detection system. In order to solve the Wu-Manber multi-pattern string matching algorithm matching efficiency and low matching success rate, and reduce the effects of the shortest pattern string length to match algorithm. This paper proposes an improvement algorithm based on WM-IS_WM(Improved Sunday Wu-Manber) algorithm. This method improve the WM algorithm by using the idea of character jump and leakage matching that can make the match window move a greater distance since the current matching fails. It can reduces the number of useless matching, and raises the efficiency of pattern string matching. By using text data test and setting up the sensitive word filtering system, the results of the experiments show that the IS_WM algorithm has lower time complexity and higher matching efficiency than the other algorithms. The proposed IS_WM algorithm is helpful to improve the ability of detecting and filtering sensitive words of cloud center network intrusion detection system.

关 键 词：多模式串匹配 WM算法 IS_WM算法 字符跳跃匹配 

分 类 号：TP309.1[自动化与计算机技术—计算机系统结构]