模式匹配模块是网络安全系统的核心模块,其系统资源占用率最高时可达70%以上。针对模式匹配在当前网络安全系统中面临的问题和挑战,以2000年为界将模式匹配方法分为传统模式匹配方法和新模式匹配方法,通过分析不同模式匹配方法的原理、计算复杂度和新模式匹配方法的发展与演化过程。得出不同方法的适用环境,对模式匹配技术在网络安全系统中的作用进行了全面综述和评价,最后对未来的研究方向进行了总结和展望。
Pattern matching is the core module in network security system, it's the highest occupancy rate of system resources is more than 70%. According to problem and challenges of pattern matching in the network security system, taking 2000 as the boundary, the pattern matching was divided into the traditional pattern matching method and the new pattern matching method. Through the analysis of the principle and the computational complexity of different pattern matching method and the development and evolution of the new pattern matching method, applicable environment of different methods was concluded. A comprehensive review and evaluation of pattern matching in network security system was presented. Finally, a conclusion and some suggestions for future research were summarized and prospected.