Mode matching method facing to high speed network

A pattern matching, high-speed network technology, applied in the direction of data exchange network, digital transmission system, electrical components, etc., can solve the problems of insufficient string matching efficiency and no consideration of adjacent relationship

Inactive Publication Date: 2009-04-15
HUNAN UNIV
View PDF0 Cites 7 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

However, because this method does not consider the adjacent relationship between the matched suffix and the current character that caused the matching failure, the efficiency of string matching is not high enough

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Mode matching method facing to high speed network
  • Mode matching method facing to high speed network
  • Mode matching method facing to high speed network

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0027] This embodiment is the application and performance test of the HPMM method in the lightweight intrusion detection system Snort, from Figure 7 It can be seen that the lightweight intrusion detection system Snort consists of four basic modules: packet sniffer, preprocessor, detection engine, and alarm output module. Its most basic function part is the data packet sniffer, the data packet sniffer is only the beginning of Snort work, after Snort obtains the data packet, it is processed by the preprocessor first, and then goes through all the rule chains in the detection engine. The data of the rule chain will be detected. Snort has three working modes: sniffer, data packet recorder, and network intrusion detection system. Sniffer mode simply reads packets from the network and displays them on the terminal as a continuous stream; packet logging mode logs packets on hard disk; network intrusion detection mode is the most complex and configurable , which allows Snort to ana...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

PUM

No PUM Login to view more

Abstract

The invention discloses a method for matching mode facing a high-speed network. The method comprises the following steps: a computer extracts a characteristic value for each data flow attacking a network and compiles the data flow to a rule model according to rule language; in network communication, the computer matches a captured data packet and the rule model by a detecting system; if matching succeeds, the detecting system determines the captured data packet as an attack action. The matching step of the invention is combined with the existing BM method to realize innovation from the two aspects of comparing ways and moving strategy, thereby greatly improving matching efficiency. The method is applicable in quick character matching fields which require network invasion detection, network invasion protection, computer virus condition code matching and the like under high-speed network environment.

Description

technical field [0001] The invention relates to a character string pattern matching method, which is suitable for applications in fields requiring character matching, such as network intrusion detection, network intrusion protection, and computer virus feature code matching in a high-speed network environment. Background technique [0002] At present, there are many pattern matching methods, and the most widely used one is the pattern matching method based on the principle of BM method. The BM pattern matching method is an exact single matching method, which uses a heuristic strategy to skip unnecessary comparisons to reduce the number of comparisons between pattern strings and text to improve matching efficiency. When matching, align the pattern string with the left end of the text, and compare characters one by one from the right end of the pattern string to the left. In the initial stage, match the suffix of the pattern string with the text. After completing an attempt (...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

Application Information

Patent Timeline
no application Login to view more
Patent Type & Authority Applications(China)
IPC IPC(8): H04L9/36H04L12/26H04L12/56
Inventor 秦拯赵远武年华张生华
Owner HUNAN UNIV
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Try Eureka
PatSnap group products

Browse by: Latest US Patents, China's latest patents, Technical Efficacy Thesaurus, Application Domain, Technology Topic.

© 2024 PatSnap. All rights reserved.Legal|Privacy policy|Modern Slavery Act Transparency Statement|Sitemap