Enhancing the Aho-Corasick Algorithm for Signature Based Anti-Virus/Worm Implementations
Autor: | Lee, Wei-Zoo, 李韋儒 |
---|---|
Rok vydání: | 2010 |
Druh dokumentu: | 學位論文 ; thesis |
Popis: | 98 Because of its accuracy, pattern matching is considered an important technique in anti-virus/worm applications. Among some famous pattern matching algorithms, the Aho-Corasick (AC) can match multiple patterns simultaneously and guarantee deterministic performance under all circumstances. However, the AC algorithm was developed for strings while virus/worm signatures could be specified by simple regular expressions. In this paper, we enhance the AC algorithm to systematically construct a signature matching system which can indicate the ending position in a finite input string for the occurrence of virus/worm signatures that are specified by strings or simple regular expressions. The regular expressions studied are those adopted in ClamAV for signature specification. |
Databáze: | Networked Digital Library of Theses & Dissertations |
Externí odkaz: |