{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,3,9]],"date-time":"2026-03-09T19:45:10Z","timestamp":1773085510004,"version":"3.50.1"},"reference-count":35,"publisher":"MDPI AG","issue":"12","license":[{"start":{"date-parts":[[2014,12,16]],"date-time":"2014-12-16T00:00:00Z","timestamp":1418688000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Sensors"],"abstract":"<jats:p>With the emergence of the Internet of Things (IoT), a large number of physical objects in daily life have been aggressively connected to the Internet. As the number of objects connected to networks increases, the security systems face a critical challenge due to the global connectivity and accessibility of the IoT. However, it is difficult to adapt traditional security systems to the objects in the IoT, because of their limited computing power and memory size. In light of this, we present a lightweight security system that uses a novel malicious pattern-matching engine. We limit the memory usage of the proposed system in order to make it work on resource-constrained devices. To mitigate performance degradation due to limitations of computation power and memory, we propose two novel techniques, auxiliary shifting and early decision. Through both techniques, we can efficiently reduce the number of matching operations on resource-constrained systems. Experiments and performance analyses show that our proposed system achieves a maximum speedup of 2.14 with an IoT object and provides scalable performance for a large number of patterns.<\/jats:p>","DOI":"10.3390\/s141224188","type":"journal-article","created":{"date-parts":[[2014,12,16]],"date-time":"2014-12-16T10:44:56Z","timestamp":1418726696000},"page":"24188-24211","update-policy":"https:\/\/doi.org\/10.3390\/mdpi_crossmark_policy","source":"Crossref","is-referenced-by-count":105,"title":["A Malicious Pattern Detection Engine for Embedded Security Systems in the Internet of Things"],"prefix":"10.3390","volume":"14","author":[{"given":"Doohwan","family":"Oh","sequence":"first","affiliation":[{"name":"School of Electrical and Electronic Engineering, Yonsei University, 50 Yonsei-ro, Seodaemun-gu, Seoul 120-749, Korea"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Deokho","family":"Kim","sequence":"additional","affiliation":[{"name":"School of Electrical and Electronic Engineering, Yonsei University, 50 Yonsei-ro, Seodaemun-gu, Seoul 120-749, Korea"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Won","family":"Ro","sequence":"additional","affiliation":[{"name":"School of Electrical and Electronic Engineering, Yonsei University, 50 Yonsei-ro, Seodaemun-gu, Seoul 120-749, Korea"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"1968","published-online":{"date-parts":[[2014,12,16]]},"reference":[{"key":"ref_1","doi-asserted-by":"crossref","first-page":"2787","DOI":"10.1016\/j.comnet.2010.05.010","article-title":"The Internet of Things: A survey","volume":"54","author":"Atzori","year":"2010","journal-title":"Comput. Netw."},{"key":"ref_2","doi-asserted-by":"crossref","first-page":"1645","DOI":"10.1016\/j.future.2013.01.010","article-title":"Internet of Things (IoT): A vision, architectural elements, and future directions","volume":"29","author":"Gubbi","year":"2013","journal-title":"Future Gener. Comput. Syst."},{"key":"ref_3","doi-asserted-by":"crossref","first-page":"1497","DOI":"10.1016\/j.adhoc.2012.02.016","article-title":"Internet of things: Vision, applications and research challenges","volume":"10","author":"Miorandi","year":"2012","journal-title":"Ad Hoc Netw."},{"key":"ref_4","doi-asserted-by":"crossref","unstructured":"Mulligan, G. (2007, January 25\u201326). The 6LoWPAN architecture. Cork, Ireland.","DOI":"10.1145\/1278972.1278992"},{"key":"ref_5","unstructured":"Evans, D. The Internet of Things: How the Next Evolution of the Internet is Changing Everything. Available online: http:\/\/www.cisco.com\/web\/about\/ac79\/docs\/innov\/IoT_IBSG_0411FINAL.pdf."},{"key":"ref_6","doi-asserted-by":"crossref","unstructured":"Kasinathan, P., Pastrone, C., Spirito, M.A., and Vinkovits, M. (2013, January 7\u20139). Denial-of-Service detection in 6LoWPAN based Internet of Things. Lyon, France.","DOI":"10.1109\/WiMOB.2013.6673419"},{"key":"ref_7","doi-asserted-by":"crossref","first-page":"222","DOI":"10.1109\/TSE.1987.232894","article-title":"An Intrusion-Detection Model","volume":"13","author":"Denning","year":"1987","journal-title":"IEEE Trans. Softw. Eng."},{"key":"ref_8","doi-asserted-by":"crossref","first-page":"310","DOI":"10.1109\/TC.2011.231","article-title":"Fast Deep Packet Inspection with a Dual Finite Automata","volume":"62","author":"Cong","year":"2013","journal-title":"IEEE Trans. Comput."},{"key":"ref_9","doi-asserted-by":"crossref","first-page":"844","DOI":"10.1109\/TC.2012.38","article-title":"A Memory-Efficient and Modular Approach for Large-Scale String Pattern Matching","volume":"62","author":"Hoang","year":"2013","journal-title":"IEEE Trans. Comput."},{"key":"ref_10","doi-asserted-by":"crossref","first-page":"197","DOI":"10.3390\/a6020197","article-title":"Enforcing Security Mechanisms in the IP-Based Internet of Things: An Algorithmic Overview","volume":"6","author":"Cirani","year":"2013","journal-title":"Algorithms"},{"key":"ref_11","doi-asserted-by":"crossref","first-page":"545","DOI":"10.1023\/A:1024600519144","article-title":"Intrusion detection techniques for mobile wireless networks","volume":"9","author":"Zhang","year":"2003","journal-title":"Wirel. Netw."},{"key":"ref_12","doi-asserted-by":"crossref","first-page":"3998","DOI":"10.3390\/s130403998","article-title":"A Distributed Signature Detection Method for Detecting Intrusions in Sensor Systems","volume":"13","author":"Kim","year":"2013","journal-title":"Sensors"},{"key":"ref_13","doi-asserted-by":"crossref","first-page":"1189","DOI":"10.1002\/dac.2356","article-title":"6LoWPAN: A study on QoS security threats and countermeasures using intrusion detection system approach","volume":"25","author":"Le","year":"2012","journal-title":"Int. J. Commun. Syst."},{"key":"ref_14","doi-asserted-by":"crossref","first-page":"15582","DOI":"10.3390\/s131115582","article-title":"Data Management for the Internet of Things: Design Primitives and Solution","volume":"13","author":"Hayajneh","year":"2013","journal-title":"Sensors"},{"key":"ref_15","unstructured":"Wu, S., and Manber, U. (1994). A Fast Algorithm for Multi-Pattern Searching, Department of Computer Science, University of Arizona. Technical Report TR-94-17."},{"key":"ref_16","doi-asserted-by":"crossref","first-page":"762","DOI":"10.1145\/359842.359859","article-title":"A fast string searching algorithm","volume":"20","author":"Boyer","year":"1977","journal-title":"Commun. ACM"},{"key":"ref_17","doi-asserted-by":"crossref","first-page":"47","DOI":"10.1007\/3-540-44867-5_4","article-title":"Fast-Search: A New Efficient Variant of the Boyer-Moore String Matching Algorithm","volume":"2647","author":"Cantone","year":"2003","journal-title":"Lect. Note Comput. Sci."},{"key":"ref_18","unstructured":"Charras, C., and Lecroq, T. (2004). Handbook of Exact String Matching Algorithms, King's College Publications."},{"key":"ref_19","doi-asserted-by":"crossref","first-page":"132","DOI":"10.1145\/79173.79184","article-title":"A very fast substring search algorithm","volume":"33","author":"Sunday","year":"1990","journal-title":"Commun. ACM"},{"key":"ref_20","doi-asserted-by":"crossref","first-page":"553","DOI":"10.1016\/j.ipl.2009.01.022","article-title":"An aggressive algorithm for multiple string matching","volume":"109","author":"Dai","year":"2009","journal-title":"Inf. Process. Lett."},{"key":"ref_21","unstructured":"Wu, S., and Manber, U. Agrep\u2014A Fast Approximate Pattern-Matching Tool. Available online: https:\/\/www.usenix.org\/legacy\/publications\/library\/proceedings\/wu.pdf."},{"key":"ref_22","unstructured":"Commentz-Walter, B. (1979). In Automata, Languages and Programming, Springer."},{"key":"ref_23","doi-asserted-by":"crossref","first-page":"333","DOI":"10.1145\/360825.360855","article-title":"Efficient string matching: An aid to bibliographic search","volume":"18","author":"Aho","year":"1975","journal-title":"Commun. ACM"},{"key":"ref_24","doi-asserted-by":"crossref","first-page":"229","DOI":"10.1016\/j.ipl.2007.01.002","article-title":"Fast exact string matching algorithms","volume":"102","author":"Lecroq","year":"2007","journal-title":"Inf. Process. Lett."},{"key":"ref_25","doi-asserted-by":"crossref","first-page":"1520","DOI":"10.1587\/elex.7.1520","article-title":"Multithreaded pattern matching algorithm with data rearrangement","volume":"7","author":"Oh","year":"2010","journal-title":"IEICE Electron. Express"},{"key":"ref_26","doi-asserted-by":"crossref","first-page":"1331","DOI":"10.1093\/comjnl\/bxs002","article-title":"Multi-Threading and Suffix Grouping on Massive Multiple Pattern Matching Algorithm","volume":"55","author":"Oh","year":"2012","journal-title":"Comput. J."},{"key":"ref_27","unstructured":"Hong, Y.D., Ke, X., and Yong, C. (2006, January 10\u201312). An improved Wu-Manber multiple patterns matching algorithm. Phoenix, AZ, USA."},{"key":"ref_28","doi-asserted-by":"crossref","first-page":"594","DOI":"10.1109\/TC.2010.95","article-title":"A Hybrid Algorithm of Backward Hashing and Automaton Tracking for Virus Scanning","volume":"60","author":"Lin","year":"2011","journal-title":"IEEE Trans. Comput."},{"key":"ref_29","doi-asserted-by":"crossref","unstructured":"Zhou, Z., Xue, Y., Liu, J., Zhang, W., and Li, J. (2007, January 12\u201315). MDH: A high speed multi-phase dynamic hash string matching algorithm for large-scale pattern set. Zhengzhou, China.","DOI":"10.1007\/978-3-540-77048-0_16"},{"key":"ref_30","doi-asserted-by":"crossref","first-page":"399","DOI":"10.1007\/11575832_44","article-title":"A Partition-Based Efficient Algorithm for Large Scale Multiple-Strings Matching","volume":"3772","author":"Liu","year":"2005","journal-title":"Lect. Notes Comput. Sci."},{"key":"ref_31","doi-asserted-by":"crossref","unstructured":"Zhang, B., Chen, X., Ping, L., and Wu, Z. (2009, January 28\u201330). Address Filtering Based Wu-Manber Multiple Patterns Matching Algorithm. Qingdao, China.","DOI":"10.1109\/WCSE.2009.698"},{"key":"ref_32","doi-asserted-by":"crossref","first-page":"10","DOI":"10.1093\/comjnl\/5.1.10","article-title":"Quicksort","volume":"5","author":"Hoare","year":"1962","journal-title":"Comput. J."},{"key":"ref_33","unstructured":"Halfacree, G., and Upton, E. (2012). Raspberry Pi User Guide, Wiley Publishing. Technical Report."},{"key":"ref_34","unstructured":"Norton, M., and Roelker, D. (2004). Hi-Performance Multi-Rule Inspection Engine, Sourcefire Network Security Inc.. Technical Report."},{"key":"ref_35","unstructured":"Kojm, T. Clam Antivirus User Manual. Available online: http:\/\/www.clamav.net\/doc\/install.html."}],"container-title":["Sensors"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.mdpi.com\/1424-8220\/14\/12\/24188\/pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,10,11]],"date-time":"2025-10-11T21:11:07Z","timestamp":1760217067000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.mdpi.com\/1424-8220\/14\/12\/24188"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2014,12,16]]},"references-count":35,"journal-issue":{"issue":"12","published-online":{"date-parts":[[2014,12]]}},"alternative-id":["s141224188"],"URL":"https:\/\/doi.org\/10.3390\/s141224188","relation":{},"ISSN":["1424-8220"],"issn-type":[{"value":"1424-8220","type":"electronic"}],"subject":[],"published":{"date-parts":[[2014,12,16]]}}}