| DHSWM:一种改进的WM多模式匹配算法 |
| |
| 引用本文： | 刘卫国,胡勇刚.DHSWM:一种改进的WM多模式匹配算法[J].中南大学学报(自然科学版),2011,42(12). |
| |
| 作者姓名： | 刘卫国 胡勇刚 |
| |
| 作者单位： | 中南大学信息科学与工程学院,湖南长沙,410083 |
| |
| 基金项目： | 国家自然科学基金资助项目(61073187) |
| |
| 摘 要： | 针对WM算法的查找效率随着模式集规模的增大而降低的问题,提出一种改进算法.在预处理阶段,改变原有Hash表中的链表结构,采用双哈希法将模式串存放在Hash1表中指定的区间,Hash表中存放该存储区间的起始位置与区间长度；Prefix表用于判断模式集中是否存在与当前匹配窗口中文本前缀相同的模式;当Shift表中出现移动值为0时,根据后缀出现在模式串其他位置的信息计算匹配窗口可滑动的最大距离并存于Shift1表中.在查找阶段,采用双哈希法在Hash1表的某一区间中查找模式串,避免在大规模模式集情况下查找过长的模式链表,扩大匹配操作后匹配窗口滑动的距离,减少冗余的匹配操作,缩短查找时间.研究结果表明:在模式集规模较大时,改进后的算法显著地提高了匹配速度；当模式串数目超过5 000条时,改进算法的查找时间要比WM算法缩短40％～47％.
|
| 关 键 词： | 入侵检测 模式匹配 Wu-Manber算法 双哈希查找 |
DHSWM: An improved multi-pattern matching algorithm based on WM algorithm |
| |
| LIU Wei-guo
,
HU Yong-gang.DHSWM: An improved multi-pattern matching algorithm based on WM algorithm[J].Journal of Central South University:Science and Technology,2011,42(12). |
| |
| Authors: | LIU Wei-guo HU Yong-gang |
| |
| Institution: | LIU Wei-guo,HU Yong-gang (School of Information Science and Engineering,Central South University,Changsha 410083,China) |
| |
| Abstract: | To resolve the problem that with the constant increase of the number of rules,the performance of Wu-Manber algorithm will become less efficient,an improved Wu-Manber algorithm named double Hash searching Wu-Manber algorithm(DHSWM) was proposed.In the pre-processing stage,the patterns were stored in specified intervals in Hash1 table by double Hash method while Hash table was used to store the parameters which indicate the start address of the interval and its length.Prefix table was used to determine whethe... |
| |
| Keywords: | intrusion detection pattern matching Wu-Manber algorithm double Hash searching |
| 本文献已被 CNKI 万方数据 等数据库收录！ |
|
