DocumentCode
3219512
Title
Towards faster string matching for intrusion detection or exceeding the speed of Snort
Author
Coit, C.J. ; Staniford, Stuart ; McAlerney, J.
Volume
1
fYear
2001
fDate
2001
Firstpage
367
Abstract
Network intrusion detection systems (NIDS) often rely on exact string matching techniques. Depending on the choice of algorithm, implementation and the frequency with which it is applied, this pattern matching may become a performance bottleneck. To keep up with increasing network speeds and traffic, NIDS can take advantage of advanced string matching algorithms. We describe the effectiveness of a significantly faster approach to pattern matching in the open source NIDS Snort
Keywords
computer network management; security of data; string matching; Snort; advanced string matching algorithms; exact string matching techniques; network intrusion detection systems; pattern matching; Frequency; Intrusion detection; Monitoring; Pattern analysis; Pattern matching; Performance analysis; Protocols; Silicon; Telecommunication traffic; Web server;
fLanguage
English
Publisher
ieee
Conference_Titel
DARPA Information Survivability Conference & Exposition II, 2001. DISCEX '01. Proceedings
Conference_Location
Anaheim, CA
Print_ISBN
0-7695-1212-7
Type
conf
DOI
10.1109/DISCEX.2001.932231
Filename
932231
Link To Document