Research on Increasing Speed of Rule-matching in Snort
Han Yong-fei
Abstract
Han Yong-fei
Abstract
This article analyzes the rule matching algorithm and working-mode of Snort,an open source-code NIDS.Firstly,this paper adds the width-first searching algorithm based on depth-first searching algorithm;secondly,this paper presents an idea of a C/S mode Snort,this idea increases server support for traditional Snort,to share the workload of client Snort.Thus,we can improve the work efficiency of Snort in two ways.
A significance statement is not available in the OpenAlex record.
A contribution statement is not available in the OpenAlex record.
Method details are not available in the OpenAlex metadata.
Findings are not separately available in the OpenAlex metadata.
Limitations are not available in the OpenAlex metadata.
Application details are not available in the OpenAlex metadata.
This article analyzes the rule matching algorithm and working-mode of Snort,an open source-code NIDS.Firstly,this paper adds the width-first searching algorithm based on depth-first searching algorithm;secondly,this paper presents an idea of a C/S mode Snort,this idea increases server support for traditional Snort,to share the workload of client Snort.Thus,we can improve the work efficiency of Snort in two ways.
Key concepts: Computer science, Workload, Matching (statistics), Open source, Mode (computer interface), Pattern matching, Code (set theory), Source code