Efficient pattern matching algorithms in IDS

Abstract

An Intrusion Detection System (IDS) is responsible for handling the detection of malicious activities. Various intrusion detection technologies are widely used. In those technologies, the pattern matching based on knowledge is the most popular technology. It compares a series of attack characteristic with user's activity that has already been discovered, and then intrusion will be detected. Its match speed affects the rate of drop packet, and false alarm, the accuracy and the real-time performance of system in a direct way. However, the intrusion detection technology relies heavily on pattern matching algorithms, as the choice of pattern matching algorithms directly affect the detection rate, so it is more important. This study is about evolution of four pattern matching algorithms namely KMP Algorithm, BM Algorithm, Enhanced BM Algorithm, One Enhanced BM Algorithm and analyzing the efficiency of algorithms using various kinds of patterns.