Single-Keyword Pattern Matching Algorithms for Network Intrusion Detection System
Kannaiyan Suria Prabha, S. Sukumaran · International Journal of Computer and Internet Security · 2013
The Network Intrusion Detection System (NIDS) is an important part of any modern network. One of the important processes in NIDS is inspecting of individuals' packets in network traffic, deciding if these packets are infected with any malicious activities. This process, which is called content matching, is done via string matching algorithms. The content matching is considered the heart of NIDS. The content matching phase consumes most of the processing time inside the NIDS and slowed down around 70% of NIDS performance. In this case, it is difficult for NIDS to distinguish between normal network packets and abnormal network packets and consequently drop numbers of network packets. New algorithms are needed to enhance the matching since enormous packets are passing through the network every second. In this paper we presented a survey of single keyword pattern matching algorithms for NIDS.