MRSI: A Fast Pattern Matching Algorithm for Anti-virus Applications

Author

Zhou, Xin ; Xu, Bo ; Qi, Yaxuan ; Li, Jun

Author_Institution

Res. Inst. of Inf. Technol., Tsinghua Univ., Beijing

fYear

2008

fDate

13-18 April 2008

Firstpage

256

Lastpage

261

Abstract

Anti-virus applications play an important role in today´s Internet communication security. Virus scanning is usually performed on email, Web and file transfer traffic flows at intranet security gateways. The performance of popular anti-virus applications relies on the pattern matching algorithms implemented in these security devices. The growth of network bandwidth and the increase of virus signatures call for high speed and scalable pattern matching algorithms. Motivated by several observations of a real-life virus signature database from Clam-AV, a popular antivirus application, a fast pattern matching algorithm named MRSI is proposed in this paper. Compared to the current algorithm implemented in Clam-AV, MRSI achieved an 80%~100% faster virus scanning speed without excessive memory usages.

Keywords

Internet; computer viruses; telecommunication security; Clam-AV antivirus; Internet communication security; MRSI; anti-virus applications; fast pattern matching algorithm; intranet security gateways; virus scanning; virus signatures; Acceleration; Algorithm design and analysis; Bandwidth; Data security; Electronic mail; Information security; Intrusion detection; National security; Pattern matching; Telecommunication traffic; Algorithms; Anti-Virus; Pattern Matching; Performance; Virus Signatures;

fLanguage

English

Publisher

ieee

Conference_Titel

Networking, 2008. ICN 2008. Seventh International Conference on

Conference_Location

Cancun

Print_ISBN

978-0-7695-3106-9

Electronic_ISBN

978-0-7695-3106-9

Type

conf

DOI

10.1109/ICN.2008.119

Filename

4498173