An innovative implement in organizing complicated and massive intrusion detection rules of IDS

This paper proposes an innovative way to organize the increasingly complicated and massive intrusion detection rules that caused by numerous variety of attacks for the IDS (Intrusion Detection System) such as Snort, which will largely enhance the detection efficiency in both space and time aspect. Being different from the traditional one-dimensional list or two-dimensional list organization method used in current intrusion detection systems, an innovative three-dimensional innovation is introduced in this paper as an improvement. A thorough dynamic performance analysis versus the traditional implements is also presented in the last part of the paper.