| 基于规则库优化算法的网络入侵检测系统研究与应用 |
| |
| 引用本文： | 石夫乾,林征,徐江. 基于规则库优化算法的网络入侵检测系统研究与应用[J]. 计算机应用与软件, 2007, 24(12): 202-204 |
| |
| 作者姓名： | 石夫乾 林征 徐江 |
| |
| 作者单位： | [1]温州医学院,浙江温州325000 [2]浙江大学现代工业设计研究所,浙江杭州310027 |
| |
| 摘 要： | 为克服通用入侵检测框架模型(GIDF)及其各组成部分在设计和实现中存在的弱点,在对一个开放性入侵检测系统软件Snort进行分析的基础上,提出增加宽度搜索与动态选项链表相结合的规则匹配操作优化算法;实验表明,改进后的系统通过增加宽度搜索提高了选项匹配的并行性;通过采用动态选项链表优化了规则匹配的顺序,缩短了深度搜索的深度,从而从整体上切实提高了Snort的检测速度.
|
| 关 键 词： | 基于网络的入侵检测系统 规则匹配 动态选项链表 规则库 优化算法 网络入侵 检测系统 研究 应用 OPTIMIZATION ALGORITHM BASED INTRUSION DETECTION SYSTEM APPLICATION 检测速度 深度搜索 链表 并行 规则匹配 改进 实验 操作 结合 表相 |
| 修稿时间： | 2006-09-27 |
STUDY AND APPLICATION OF INTRUSION DETECTION SYSTEM BASED ON RULE-BASE OPTIMIZATION ALGORITHM |
| |
| Shi Fuqian,Lin Zheng,Xu Jiang. STUDY AND APPLICATION OF INTRUSION DETECTION SYSTEM BASED ON RULE-BASE OPTIMIZATION ALGORITHM[J]. Computer Applications and Software, 2007, 24(12): 202-204 |
| |
| Authors: | Shi Fuqian Lin Zheng Xu Jiang |
| |
| Abstract: | To.overcome the weakness of the generic intrusion detection framework(GIDF)and its various components in design and implementation,a rule-base optimization algorithm is proposed based on the analysis of the open-system Snort.Experiments show that the paralleliz-ability of option matching is improved by adding the width-searching,and the depth of rule matching is shortened by adjusting dynamically the sequence of rules.Thus,the overall performance of Snort is enhanced effectively. |
| |
| Keywords: | Network-based intrusion detection system Rule matching Dynamic option list |
| 本文献已被 CNKI 维普 万方数据 等数据库收录！ |
