{"id":"https://openalex.org/W2157472632","doi":"https://doi.org/10.1109/iscc.2008.4625587","title":"Highly compressed Aho-Corasick automata for efficient intrusion detection","display_name":"Highly compressed Aho-Corasick automata for efficient intrusion detection","publication_year":2008,"publication_date":"2008-07-01","ids":{"openalex":"https://openalex.org/W2157472632","doi":"https://doi.org/10.1109/iscc.2008.4625587","mag":"2157472632"},"language":"en","primary_location":{"id":"doi:10.1109/iscc.2008.4625587","is_oa":false,"landing_page_url":"https://doi.org/10.1109/iscc.2008.4625587","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2008 IEEE Symposium on Computers and Communications","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5038467927","display_name":"Xinyan Zha","orcid":null},"institutions":[{"id":"https://openalex.org/I33213144","display_name":"University of Florida","ror":"https://ror.org/02y3ad647","country_code":"US","type":"education","lineage":["https://openalex.org/I33213144"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Xinyan Zha","raw_affiliation_strings":["Computer and Information Science and Engineering, University of Florida, Gainesville, FL, USA"],"affiliations":[{"raw_affiliation_string":"Computer and Information Science and Engineering, University of Florida, Gainesville, FL, USA","institution_ids":["https://openalex.org/I33213144"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5070824596","display_name":"Sartaj Sahni","orcid":"https://orcid.org/0000-0002-8129-1676"},"institutions":[{"id":"https://openalex.org/I33213144","display_name":"University of Florida","ror":"https://ror.org/02y3ad647","country_code":"US","type":"education","lineage":["https://openalex.org/I33213144"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Sartaj Sahni","raw_affiliation_strings":["Computer and Information Science and Engineering, University of Florida, Gainesville, FL, USA"],"affiliations":[{"raw_affiliation_string":"Computer and Information Science and Engineering, University of Florida, Gainesville, FL, USA","institution_ids":["https://openalex.org/I33213144"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":["https://openalex.org/A5038467927"],"corresponding_institution_ids":["https://openalex.org/I33213144"],"apc_list":null,"apc_paid":null,"fwci":1.3864,"has_fulltext":false,"cited_by_count":16,"citation_normalized_percentile":{"value":0.84644749,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":98},"biblio":{"volume":null,"issue":null,"first_page":"298","last_page":"303"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12326","display_name":"Network Packet Processing and Optimization","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12326","display_name":"Network Packet Processing and Optimization","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9965999722480774,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8178130388259888},{"id":"https://openalex.org/keywords/automaton","display_name":"Automaton","score":0.7103868126869202},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.6874927282333374},{"id":"https://openalex.org/keywords/bitmap","display_name":"Bitmap","score":0.5370333194732666},{"id":"https://openalex.org/keywords/string","display_name":"String (physics)","score":0.5092092752456665},{"id":"https://openalex.org/keywords/path","display_name":"Path (computing)","score":0.47944870591163635},{"id":"https://openalex.org/keywords/algorithm","display_name":"Algorithm","score":0.3355851173400879},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.2540111541748047},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.1833203136920929},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.17864152789115906},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.12102833390235901},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.09841784834861755}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8178130388259888},{"id":"https://openalex.org/C112505250","wikidata":"https://www.wikidata.org/wiki/Q787116","display_name":"Automaton","level":2,"score":0.7103868126869202},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.6874927282333374},{"id":"https://openalex.org/C3115412","wikidata":"https://www.wikidata.org/wiki/Q1194708","display_name":"Bitmap","level":2,"score":0.5370333194732666},{"id":"https://openalex.org/C157486923","wikidata":"https://www.wikidata.org/wiki/Q1376436","display_name":"String (physics)","level":2,"score":0.5092092752456665},{"id":"https://openalex.org/C2777735758","wikidata":"https://www.wikidata.org/wiki/Q817765","display_name":"Path (computing)","level":2,"score":0.47944870591163635},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.3355851173400879},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.2540111541748047},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.1833203136920929},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.17864152789115906},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.12102833390235901},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.09841784834861755},{"id":"https://openalex.org/C37914503","wikidata":"https://www.wikidata.org/wiki/Q156495","display_name":"Mathematical physics","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/iscc.2008.4625587","is_oa":false,"landing_page_url":"https://doi.org/10.1109/iscc.2008.4625587","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2008 IEEE Symposium on Computers and Communications","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":29,"referenced_works":["https://openalex.org/W127947978","https://openalex.org/W1516506771","https://openalex.org/W1531610435","https://openalex.org/W1581408521","https://openalex.org/W1590238182","https://openalex.org/W1802535396","https://openalex.org/W1834037038","https://openalex.org/W1849161695","https://openalex.org/W1870022081","https://openalex.org/W1999064874","https://openalex.org/W2026164946","https://openalex.org/W2076382802","https://openalex.org/W2096495947","https://openalex.org/W2099290142","https://openalex.org/W2099964107","https://openalex.org/W2111695485","https://openalex.org/W2132225227","https://openalex.org/W2132941101","https://openalex.org/W2134684274","https://openalex.org/W2145791740","https://openalex.org/W2148491003","https://openalex.org/W2154770818","https://openalex.org/W3003601347","https://openalex.org/W4251400443","https://openalex.org/W4285719527","https://openalex.org/W6634903744","https://openalex.org/W6638195584","https://openalex.org/W6669537557","https://openalex.org/W6679934005"],"related_works":["https://openalex.org/W2350456333","https://openalex.org/W2101993108","https://openalex.org/W2356608866","https://openalex.org/W2355840328","https://openalex.org/W1975966184","https://openalex.org/W2137246017","https://openalex.org/W2364393392","https://openalex.org/W3126935378","https://openalex.org/W2377096008","https://openalex.org/W2809136181"],"abstract_inverted_index":{"We":[0],"develop":[1],"a":[2,44],"method":[3,19],"to":[4,42,61,82],"compress":[5],"the":[6,68,77],"unoptimized":[7],"Aho-Corasick":[8],"automaton":[9],"that":[10],"is":[11,85],"used":[12],"widely":[13],"in":[14],"intrusion":[15],"detection":[16],"systems.":[17],"Our":[18],"uses":[20],"bitmaps":[21],"with":[22,46],"multiple":[23,35],"levels":[24,36],"of":[25,37,71,79],"summaries":[26],"as":[27,29,47,49],"well":[28],"aggressive":[30],"path":[31],"compaction.":[32],"By":[33],"using":[34],"summaries,":[38],"we":[39],"are":[40],"able":[41],"determine":[43],"popcount":[45],"few":[48],"1":[50],"addition.":[51],"On":[52],"Snort":[53],"string":[54],"databases,":[55],"our":[56],"compressed":[57,69],"automata":[58,70],"take":[59],"24%":[60],"31%":[62],"less":[63],"memory":[64],"than":[65],"taken":[66],"by":[67,87],"Tuck":[72],"et":[73],"al.":[74],"[23].":[75],"and":[76],"number":[78],"additions":[80],"required":[81],"compute":[83],"popcounts":[84],"reduced":[86],"about":[88],"90%.":[89]},"counts_by_year":[{"year":2018,"cited_by_count":1},{"year":2017,"cited_by_count":1},{"year":2015,"cited_by_count":2},{"year":2014,"cited_by_count":2},{"year":2013,"cited_by_count":1},{"year":2012,"cited_by_count":5}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}