A Multi-pattern Matching Algorithm Based on Double Array Trie

Miao Hou,YingHui Song,Dongliang Xu,Hongli Zhang
DOI: https://doi.org/10.1007/978-3-642-41674-3_122
2014-01-01
Abstract:With the increasing of network throughput, the size of pattern sets in Network Intrusion Detection System (NIDS) are growing gradually, how to reduce memory space of pattern sets has become one of the research hot spots. This paper presents a multi-pattern matching algorithm which combines the classical Aho-Corasick (AC) algorithm with Double Array Trie (DAT), called DAT-AC. We use two linear arrays to determine the state transition and decrease the memory space by reducing the unnecessary state transition. Experimental results demonstrate that DAT-AC performs better than the classical AC algorithm, when the number of pattern is larger than five thousand.
What problem does this paper attempt to address?