多模式匹配算法在网络入侵自动检测中的应用  

Application of Multi-pattern Matching Algorithm in Automatic Network Intrusion Detection

作　　者：彭仁旺[1] PENG Ren-wang(Guangdong Vocational College of Science and Technology,Zhuhai 519000 China)

机构地区：[1]广东科学技术职业学院,广东珠海519000

出　　处：《自动化技术与应用》2021年第3期92-95,101,共5页Techniques of Automation and Applications

摘　　要：为了可以对计算机网络安全进行有效的保护,同时提高计算机网络入侵检测的功能及其效率,提出多模式匹配算法在网络入侵自动检测中的应用。首先快速检测引擎初始化,快速有效地区别规则集合;其次构造模式匹配链表,读取系统配置文件的规则;最后检测网络数据包,确保计算机网络安全。通过实验结果的对比,可以明显看出,相比于传统算法,多模式匹配算法在网络入侵自动检测中的应用要更具有实用性,对入侵数据的检测能够进行高速处理,相同时间范围内,多模式匹配算法的超调量远超传统算法。In order to protect computer network security effectively and improve the function and efficiency of computer network intrusion detection,the application of multi-pattern matching algorithm in automatic network intrusion detection is proposed.First,the fast detection engine is initialized to distinguish the rule set quickly and effectively.Secondly,the pattern matching list is constructed and the rules of system configuration file are read.Finally,the network packet is detected to ensure the security of the computer network.Through the comparison of experimental results,it can be clearly seen that compared with the traditional algorithm,the application of multi-pattern matching algorithm in the automatic network intrusion detection is more practical,and the detection of intrusion data can be processed at high speed.In the same time range,the overshoot of multi-pattern matching algorithm is far more than that of the traditional algorithm.

关 键 词：多模式匹配算法 网络入侵 自动检测 

分 类 号：TP301[自动化与计算机技术—计算机系统结构]