Network Security White Papers
SNORTRAN: An Optimizing Compiler for Snort Rules
Overview This paper developed an optimizing compiler for intrusion detection rules popularized by an open-source Snort Network Intrusion Detection System (www.snort.org). While Snort and Snort-like rules are usually thought of as a list of independent patterns to be tested in a sequential order, the paper demonstrates that common compilation techniques are directly applicable to Snort rule sets and are able to produce high-performance matching engines. SNORTRAN combines several compilation techniques, including cost-optimized decision trees, pattern matching precompilation, and string set clustering. Although all these techniques have been used before in other domain-specific languages, one believes their synthesis in SNORTRAN is original and unique.
| Publisher | Fidelis Security Systems | File Format | |
|---|---|---|---|
| Date Published | September 2002 | ||
| Format | White Papers | ||
| Topics | |||
-
Did you find this white paper useful? 4 out of 7 users found this white paper useful
White Paper RSS
Download
Register
