Towards adaptive character frequency-based exclusive signature matching scheme and its applications in distributed intrusion detection

摘要: Network intrusion detection systems (NIDSs), especially signature-based NIDSs, are being widely deployed in a distributed network environment with the purpose of defending against variety attacks. However, signature matching is key limiting factor to limit and lower performance NIDS large-scale environment, which cost at least linear size an input string. The overhead packets can greatly reduce effectiveness such heavily consume computer resources. To mitigate this issue, more efficient algorithm desirable. In paper, we therefore develop adaptive character frequency-based exclusive scheme (named ACF-EX) that improve process for NIDS. experiment, implemented ACF-EX evaluated it by comparing Snort. addition, further apply constructing packet filter out conducting NIDS, avoid implementation issues flexibility scheme. experimental results demonstrate that, proposed positively time consumption our promising burden