PIECEWISE CLASSIFICATION OF ATTACK PATTERNS FOR EFFICIENT NETWORK INTRUSION DETECTION

Abdelhalim Zaidi, Nazim Agoulmine, Tayeb Kenaza

2010

Abstract

This paper presents a new scheme to improve the efficiency of pattern matching algorithms. The proposed approach is based on a piecewise classification of patterns using the common substrings. The main idea is to split the whole set of patterns into small subsets in accordance to the common substrings and treat the subsets independently. To reduce the number of patterns to match, we use the common substrings as an index for the search. We show that are our algorihtm is capable to outcome in term of performance other reference algorithms, such as Aho-Corasick.

Paper Citation

in Harvard Style

Zaidi A., Agoulmine N. and Kenaza T. (2010). PIECEWISE CLASSIFICATION OF ATTACK PATTERNS FOR EFFICIENT NETWORK INTRUSION DETECTION . In Proceedings of the International Conference on Security and Cryptography - Volume 1: SECRYPT, (ICETE 2010) ISBN 978-989-8425-18-8, pages 100-104. DOI: 10.5220/0003033101000104

in Bibtex Style

@conference{secrypt10,
author={Abdelhalim Zaidi and Nazim Agoulmine and Tayeb Kenaza},
title={PIECEWISE CLASSIFICATION OF ATTACK PATTERNS FOR EFFICIENT NETWORK INTRUSION DETECTION},
booktitle={Proceedings of the International Conference on Security and Cryptography - Volume 1: SECRYPT, (ICETE 2010)},
year={2010},
pages={100-104},
publisher={SciTePress},
organization={INSTICC},
doi={10.5220/0003033101000104},
isbn={978-989-8425-18-8},
}

in EndNote Style

TY - CONF
JO - Proceedings of the International Conference on Security and Cryptography - Volume 1: SECRYPT, (ICETE 2010)
TI - PIECEWISE CLASSIFICATION OF ATTACK PATTERNS FOR EFFICIENT NETWORK INTRUSION DETECTION
SN - 978-989-8425-18-8
AU - Zaidi A.
AU - Agoulmine N.
AU - Kenaza T.
PY - 2010
SP - 100
EP - 104
DO - 10.5220/0003033101000104