or
Bookmark and Share
Methods and systems for multi-pattern searching
   
Document Number
US Patent 7539681
Issued Date
May 26, 2009
Link
Inventors
Map
Abstract
Embodiments of the present invention relate to systems and methods for optimizing and reducing the memory requirements of state machine algorithms in pattern matching applications. Memory requirements of an Aho-Corasick algorithm are reduced in an intrusion detection system by representing the state table as three separate data structures. Memory requirements of an Aho-Corasick algorithm are also reduced by applying a banded-row sparse matrix technique to the state transition table of the state table. The pattern matching performance of the intrusion detection system is improved by performing a case insensitive search, where the characters of the test sequence are converted to uppercase as the characters are read. Testing reveals that state transition tables with sixteen bit elements outperform state transition tables with thirty-two bit elements and do not reduce the functionality of intrusion detection systems using the Aho-Corasick algorithm.
Tags:
Description:
Amusing 0%
Clever 0%
Complex 0%
Efficient 0%
Historic 0%
Important 0%
Innovative 0%
Interesting 0%
Practical 0%
Simple 0%
Number of Claims:
8
Comments:
no comments yet
Owner
Sourcefire, Inc. (Columbia, MD)
Published
May 26, 2009
Application Number
10/898,220
Filed
July 26, 2004
US Classification
707/9   707/10 714/48 714/49 726/26
Int'l Classification
G06F   17/30   (20060101)   G06F   7/04   (20060101)  
Examiner
Assistant Examiner
Attorney/Law Firm
USPTO Field of Search
707/6  
Related Patents
Claims
Description
About| FAQs| Terms & Disclaimer| Link to Us| Contact Us