| 摘要 |
The present invention relates to a method for detecting intrusion into a network, a system and a computer readable recording medium using the same. The method for detecting the intrusion into the network, deforming an EHMA algorithm and being applied to a network intrusion detecting system, according to the present invention comprises the steps of: (a) acquiring a common gram from letters, numbers or symbols included in a sampling window applied to each pattern and generating a common gram set combinable from the letters, the numbers or the symbols included in the common gram to represent at least one pattern included in a pattern set established to be used in the intrusion detecting system; (b) constructing a first and a second hash table using the patterns included in the pattern set and the common gram set; (c) detecting a pattern within a network packet by using the second hash table in the case of detecting the same letters, numbers or symbols among the letters, the numbers and the symbols read from the network packet by using the first hash table, as those of the common gram; and (d) selecting the optimal common gram set among combinable common gram sets by referring to an calculation amount needed in detecting the pattern within the network packet. |
