An Efficient Packet Pre-filtering Algorithm for NIDS

Autor:	Xie Peidai, Wan Hui, Zhong Qiu-xi, Chen Cheng
Rok vydání:	2012
Předmět:	Finite-state machine Computer science Network packet Efficient algorithm ComputerSystemsOrganization_COMPUTER-COMMUNICATIONNETWORKS Pattern matching Network intrusion detection Bloom filter Pre filtering Algorithm
Zdroj:	Recent Advances in Computer Science and Information Engineering ISBN: 9783642257650
DOI:	10.1007/978-3-642-25766-7_16
Popis:	The increasing number of rules used in Network Intrusion Detection System(NIDS) based on pattern matching lead to the performance diminishing. An efficient algorithm(Multi-AC) for Packet Pre-filtering is proposed to improve the performance of Packet Pre-filtering and NIDS. By making Multilevel AC finite automata, it reduces the number of rules that are candidates for a full match. Experiments based on Snort show that the rules’ number can be reduced to 11%-14% by using Multi-AC algorithm.
Databáze:	OpenAIRE
Externí odkaz:	https://explore.openaire.eu/search/publication?articleId=doi_________::41b16f1766d40a770f338d4812910472 https://doi.org/10.1007/978-3-642-25766-7_16 Zobrazit plný text záznamu