点击次数：

论文类型：期刊论文

发表时间：2014-09-01

发表刊物：International Journal of Network Security

收录刊物：EI、Scopus

卷号：16

期号：5

页面范围：382-388

ISSN号：1816353X

摘要：There is a growing demand for wireless ad hoc network systems in examining the content of data packages in order to improve network security and application service. Whereas, each distributed wireless node has limited memory and computing power. Since regular expressions offer superior expression power and flexibility, taking advantage of distributed nodes and regular expression collaboratively can be a new perspective for wireless network security strategy. In this paper, a regular expression matching approach is introduced for distributed wireless network security system called DREM (Distributed Regular Expression Matching), which divides the matching into two stages: prefiltering stage and verifying stage. Intensive experiments were conducted on Snort and L7-Filter regular expression data sets to verify the system. The experimental results show that our strategy can speed up the efficiency to 1.7 times faster than conventional approaches for wireless security systems. It is also proved by emulation that our approach can be regarded as a firewall system and well applied in medium or large scale distributed wireless network systems.