Multi-pattern string matching algorithms comparison for intrusion detection system

Autor: Awsan Abdulrahman Hasan, Nur’Aini Abdul Rashid, Atheer Akram Abdulrazzaq
Rok vydání: 2014
Předmět:
Zdroj: AIP Conference Proceedings.
ISSN: 0094-243X
DOI: 10.1063/1.4903558
Popis: Computer networks are developing exponentially and running at high speeds. With the increasing number of Internet users, computers have become the preferred target for complex attacks that require complex analyses to be detected. The Intrusion detection system (IDS) is created and turned into an important part of any modern network to protect the network from attacks. The IDS relies on string matching algorithms to identify network attacks, but these string matching algorithms consume a considerable amount of IDS processing time, thereby slows down the IDS performance. A new algorithm that can overcome the weakness of the IDS needs to be developed. Improving the multi-pattern matching algorithm ensure that an IDS can work properly and the limitations can be overcome. In this paper, we perform a comparison between our three multi-pattern matching algorithms; MP-KR, MPHQS and MPH-BMH with their corresponding original algorithms Kr, QS and BMH respectively. The experiments show that MPH–QS performs best among the proposed algorithms, followed by MPH–BMH, and MP–KR is the slowest. MPH–QS detects a large number of signature patterns in short time compared to other two algorithms. This finding can prove that the multi-pattern matching algorithms are more efficient in high-speed networks.
Databáze: OpenAIRE