Research and Implementation on Increasing speed of Rule-matching in Snort
Wang Meng · Computers & Security · 2008
While the present network environment becomes more and more complex,the network security manager's work changes to be more serious accordingly. The nonchalant negligence then has the possibility to leave behind the significant hidden danger of safety. Moreover,it is convenient to obtain the on - line course and a thousand kinds of invasion tools,which poses great challenges to the network security. This article analyzes the rules matching algorithm of Snort ,an open source-code NIDS.In order to increase effectively the rule matching speed,some tentative work is done to rebuild the examination Engineer of Snort.