Title :
A Pattern Group Partitioning for Parallel String Matching using a Pattern Grouping Metric
Author :
HyunJin Kim ; Sungho Kang
Author_Institution :
Flash Solution Dev. Team, Samsung Electron., Hwasung, South Korea
fDate :
9/1/2010 12:00:00 AM
Abstract :
Considering the increasing number of target patterns for the intrusion detection systems (IDS), memory requirements should be minimized for reducing hardware overhead. This paper proposes an algorithm that partitions a set of target patterns into multiple subgroups for homogeneous string matchers. Using a pattern grouping metric, the proposed pattern partitioning makes the average length of the mapped target patterns onto a string matcher approximately equal to the average length of total target patterns. Therefore, the variety of target pattern lengths can be mitigated because the number of mapped target patterns onto each string matcher is balanced.
Keywords :
computer network security; string matching; homogeneous string matchers; intrusion detection systems; memory requirements; parallel string matching; pattern group partitioning; pattern grouping metric; target pattern lengths; Automata; Engines; Hardware; Intrusion detection; Iterative algorithms; Partitioning algorithms; Pattern matching; Payloads; Scalability; Computer network security; and string matching; finite state machines; site security monitoring;
Journal_Title :
Communications Letters, IEEE
DOI :
10.1109/LCOMM.2010.080210.092347