A single-pattern matching algorithm base on twice jumps in the intrusion detection systems

The pattern matching algorithm is one of the core algorithms used in the intrusion detection system. The classical snort system has completed the matching for characteristic string of intrusion through the BM single-pattern algorithm. In actual application, the Sunday algorithm has a efficiency higher than the BM algorithm. In this text, an extra jump array was added to the jump arrays of the Sunday algorithm. When it appears unequal characters during the procedure of matching, make twice jumps successively and help decrease the redundant matching to a greater extent. This text describes how to realize twice-jumps algorithm and its analysis and experimental verification show the accuracy and efficiency of the improved algorithm compared with the Sunday algorithm.