3 ms·
Still remember when first heard Aho-Corasick from the Snort IDS mailing list circa 2002. This paper described the optimization of Snort detection engine based
by teleforce 3y ago
Still remember when first heard Aho-Corasick from the Snort IDS mailing list circa 2002. This paper described the optimization of Snort detection engine based on Aho-Corasick in the later version of Snort [1]. Not sure though which algorithm that the latest Snort 3 IDS is using for its detection engine [2].
[1] Optimizing Pattern Matching for Intrusion Detection:
https://www.semanticscholar.org/paper/Optimizing-Pattern-Matching-for-Intrusion-Detection-Norton/df5e041b22f4e1560bb506bb72a036c864789e3c https://www.semanticscholar.org/paper/Optimizing-Pattern-Mat...
[2] Snort:
https://www.snort.org/ https://www.snort.org/