电力信息网络入侵检测中BM改进算法研究

分析了在电力信息平台中引入入侵检测技术的安全需求，介绍了Snort入侵检测系统的结构和工作流程，指出了字符串匹配算法的效率对于提高Snort系统性能的重要性。在此基础上，对Snort系统中的BM单模式匹配算法进行深入研究，提出了BM改进算法。改进算法分析了当前比较字符串的末字符及其后继字符唯一性、关联性，实现了模式串的较大向右跳转距离。在Snort系统中对改进算法进行了验证，实验结果表明，改进算法有效地提高了入侵检测的效率。

Research of Improved BM Algorithm in the Intrusion Detection of Power Information Network

This paper analyzes the security requirements of presenting the intrusion detection technology in the power information platform, and introduces the structure and workflow of Snort intrusion detection system and points out the importance of string matching algorithm efficiency to the performance improvement of Snort system. On this basis, this paper researches BM single-pattern matching algorithm of Snort system in-depth, and proposes a novel improved BM algorithm. The improved BM algorithm analyzes the uniqueness and relevance of the end character and the subsequent character in the current compared string, which achieves larger jumping distance on the right. Finally, this paper verifies the improved BM algorithm in Snort system. The experimental results show that the im- proved BM algorithm can effectively increase the efficiency of intrusion detection in Snort system.