Enhanced Aho-Corasick Algorithm for Network Intrusion Detection Systems
Fayez, M., Abbas, A., Khaled, H., Ghoniemy, S. (2024). Enhanced Aho-Corasick Algorithm for Network Intrusion Detection Systems. EKB Journal Management System, 24(3), 83-92. doi: 10.21608/ijicis.2024.315432.1349
Mahmoud Fayez; Anas Abbas; Heba Khaled; Said Ghoniemy. "Enhanced Aho-Corasick Algorithm for Network Intrusion Detection Systems". EKB Journal Management System, 24, 3, 2024, 83-92. doi: 10.21608/ijicis.2024.315432.1349
Fayez, M., Abbas, A., Khaled, H., Ghoniemy, S. (2024). 'Enhanced Aho-Corasick Algorithm for Network Intrusion Detection Systems', EKB Journal Management System, 24(3), pp. 83-92. doi: 10.21608/ijicis.2024.315432.1349
Fayez, M., Abbas, A., Khaled, H., Ghoniemy, S. Enhanced Aho-Corasick Algorithm for Network Intrusion Detection Systems. EKB Journal Management System, 2024; 24(3): 83-92. doi: 10.21608/ijicis.2024.315432.1349

Enhanced Aho-Corasick Algorithm for Network Intrusion Detection Systems

International Journal of Intelligent Computing and Information Sciences
Volume 24, Issue 3, September 2024, Page 83-92  XML PDF (614.93 K)
Document Type: Original Article
DOI: 10.21608/ijicis.2024.315432.1349
View on SCiNiTO View on SCiNiTO
Authors
Mahmoud Fayezorcid 1; Anas Abbas email orcid 2; Heba Khaledorcid 3; Said Ghoniemyorcid 4
1Computer Systems, FCIS
2Computer systems department. FCIS
3Department of Computer Systems, Faculty of Computer & Information Sciences, Ain Shams University, Abbasia, Cairo 11566, Egypt
4Prof at Faculty of Computer & Information Sciences, Computer Systems Department, Ain Shams University, Cairo , Egypt.
Abstract
The exponential growth in internet data usage has created a pressing demand for highly efficient Network Intrusion Detection Systems (NIDS) capable of scaling with ever-increasing bandwidths to safeguard sensitive information. A cornerstone of NIDS, packet inspection, hinges on the ability to rapidly identify and analyze patterns within incoming data streams. The more diverse and extensive the pattern database, the more robust and effective the NIDS becomes. While the parallel failure-less version of the Aho-Corasick (AC) algorithm provides maximum parallelism, it faces significant memory constraints due to the large transition tables generated when dealing with a vast number of patterns. To mitigate this limitation and enhance the scalability of NIDS, we introduce a novel parallel failure-less compressed hashed variation of the Aho-Corasick algorithm. Our proposed approach leverages the power of compression and hashing techniques to significantly reduce memory consumption without compromising performance. Empirical evaluations demonstrate that our algorithm requires only a fraction (approximately the square root) of the memory footprint compared to the original parallel failure-less Aho-Corasick algorithm, making it a more practical and scalable solution for modern NIDS architectures.
Keywords
Compression; Hashing; NIDS; GPU; distributed systems
Statistics
Article View: 109
PDF Download: 150