Enhancing the Aho-Corasick Algorithm for Signature Based Anti-Virus/Worm Implementations

Autor: Lee, Wei-Zoo, 李韋儒
Rok vydání: 2010
Druh dokumentu: 學位論文 ; thesis
Popis: 98
Because of its accuracy, pattern matching is considered an important technique in anti-virus/worm applications. Among some famous pattern matching algorithms, the Aho-Corasick (AC) can match multiple patterns simultaneously and guarantee deterministic performance under all circumstances. However, the AC algorithm was developed for strings while virus/worm signatures could be specified by simple regular expressions. In this paper, we enhance the AC algorithm to systematically construct a signature matching system which can indicate the ending position in a finite input string for the occurrence of virus/worm signatures that are specified by strings or simple regular expressions. The regular expressions studied are those adopted in ClamAV for signature specification.
Databáze: Networked Digital Library of Theses & Dissertations