MRSI: A fast pattern matching algorithm for anti-virus applications

Proceedings - 7th International Conference on Networking, ICN 2008

Volumn , Issue , 2008, Pages 256-261

  Zhou, Xin ^a   Xu, Bo ^a   Qi, Yaxuan ^a,b   Li, Jun ^a,b  

^a TSINGHUA UNIVERSITY   (China)

^b TSINGHUA NATIONAL LABORATORY FOR INFORMATION SCIENCE AND TECHNOLOGY   (China)

Author keywords

Pattern matching; Virus signatures

Indexed keywords

ALGORITHMS; GATEWAYS (COMPUTER NETWORKS); MAGNETIC RESONANCE SPECTROSCOPY; PATTERN MATCHING; SCANNING; SPEED; TELECOMMUNICATION SYSTEMS; TRAFFIC SURVEYS; VIRUSES;

ANTI-VIRUS; FILE TRANSFERS; HIGH SPEEDS; INTERNATIONAL CONFERENCES; INTERNET COMMUNICATIONS; INTRANET SECURITY; NETWORK BANDWIDTHS; PATTERN MATCHING ALGORITHMS; SECURITY DEVICES; TRAFFIC FLOWING; VIRUS SCANNING; VIRUS SIGNATURES;

COMPUTER VIRUSES;

EID: 50049108670     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ICN.2008.119     Document Type: Conference Paper

References (14)

1. A. V. Aho and M. J. Corasick, Efficient string matching: An aid to bibliographic search, Communications of the ACM, 18(6):333-340, 1975.
2. R. S. Boyer and J. S. Moore. A fast string searching algorithm, Communications of the ACM, 20(10), 1977.
3. th International Conference on Applied Cryptography and Network Security (ACNS), 2006.
4. T. Kojm, Clam-AV, In http://www.clamav.net, 2004.
5. Sourcefire, Introduction to Clam-AV. http://www.sourcefire.com/products/ clamav, 2007
6. O. Erdogan and P. Cao, Hash-AV: fast virus signature scanning by cache-resident filters, Proc. Of the International Conference on Systems and Networks Communications (ICSNC), 2007
7. F. Skulason, The evolution of polymorphic viruses, In http://vx.netlux.org/lib/static/vdat/polyevol.htm, 2004.
8. M. Roesch, Snort: Network intrusion detection system, In http://www.snort.org, 2004.
9. M. Norton, Optimizing Pattern Matching for Intrusion Detection, In http://docs.idsresearch.org/OptimizingPatternMatchingForIDS.pdf, 2004
10. M. Fisk and G. Varghese, An analysis of fast string matching applied to content-based forwarding and intrusion detection, Technical Report CS2001-0670, University of California - San Diego, 2002.
11. K. G. Anagnostakis, S. Antonatos, E. P. Markatos, and M. Polychronakis, E2xB: A domain-specific string matching algorithm for intrusion detection, Proc. of IFIP International Information Security Conference (SEC'03), 2003.
12. S. Wu and U. Manber, A fast algorithm for multipattern searching, Technical Report TR-94-17, Department of Computer Science, University of Arizona, 1994.
13. C. J. Coit, S. Staniford, and J. McAlerney, Towards faster pattern matching for intrusion detection, or exceeding the speed of snort, Proc. of the 2nd DARPA Information Survivability Conference and Exposition (DISCEX II), 2002.
14. C. P. W. Y. Miretskiy, A. Das and E. Zadok. Avfs: An on-access anti-virus file system. Proc. of the 13th USENIX Security Symposium, 2004.