入侵检测系统中模式匹配算法的研究  

Research on pattern matching algorithm in intrusion detection system

作　　者：闫宏丽 赵丽 Yan Hongli;Zhao Li(School of Information Technology and Engineering,Jinzhong University,Jinzhong,Shanxi 030619,China)

机构地区：[1]晋中学院信息技术与工程学院,山西晋中030619

出　　处：《计算机时代》2020年第9期81-83,共3页Computer Era

基　　金：晋中学院“1331工程”创客团队(jzxycktd2019029);2018晋中学院优秀教学团队(2018)。

摘　　要：结合模式匹配的概念,提出模式匹配在入侵检测系统中使用的原理及特点。在分析了常见的单模式匹配和多模式匹配算法之后,将模式匹配方法应用在误用入侵检测系统中,去完成对已知攻击的检测。基于模式匹配的入侵检测系统具有较低的虚警率,但要想提高入侵检测系统的性能,必须对模式匹配算法做进一步的改进。Combined with the concept of pattern matching,the principle and characteristics of pattern matching used in intrusion detection system are put forward.After analyzing common single-mode matching and multi-mode matching algorithms,the pattern matching method is applied to the misuse intrusion detection system to complete the detection of known attacks.The intrusion detection system based on pattern matching has low false positive rate,but in order to improve the performance of intrusion detection system,the pattern matching algorithm must be further improved.

关 键 词：入侵检测 模式匹配 误用入侵检测 攻击 虚警率 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]