100 likes | 112 Views
ARCHITECTURES FOR BIT-SPLIT STRING SCANNING IN INTRUSION DETECTION. Author : Lin Tan , Timothy Sherwood Publisher: IEEE MICRO, 2006 Presenter: Hsin-Mao Chen Date: 2009/11/11. Outline. Introduction Aho-Corasick Bit-Split Idea String Matching Engine Finding a Match
E N D
ARCHITECTURES FOR BIT-SPLIT STRING SCANNING IN INTRUSION DETECTION Author: Lin Tan, Timothy Sherwood Publisher: IEEE MICRO, 2006 Presenter: Hsin-Mao Chen Date:2009/11/11
Outline • Introduction • Aho-Corasick • Bit-Split Idea • String Matching Engine • Finding a Match • Practical Optimal Partitioning • Performance
Introduction • Aho-Corasick algorithm is an efficient algorithm for string matching. It performs well even in the worst case.
Aho-Corasick String: he, hers, his, she h
Bit-Split Idea 0 ABC 000 011 001 0 1 A C B AB C 0 1 A BC