关键词: 入侵检测系统, Wu-Manber算法, 网络安全, 多模式匹配

Abstract: With network speed and the number of rules constantly increasing, pattern matching is becoming the bottleneck in Network Intrusion Detection System （NIDS）. This paper proposed a fast Wu-Manber-like multi-pattern matching algorithm for intrusion detection, called FWM. By subdividing the pattern group into two subgroups and dealing with the two subgroups in different methods, the FWM algorithm enhanced the efficiency of pattern matching. Experimental results show that, when pattern group contains the pattern that is less than three bytes, the FWM algorithm improves average performance by 29%~44% compared to the original NIDS pattern matching algorithm.

Key words: intrusion detection system, Wu-Manber algorithm, network security, multi-pattern matching