1
Steven D Shanklin, Thomas E Bernhard, Gerald S Lathem: Intrusion detection signature analysis using regular expressions and logical operators. Cisco Technology, Baker Botts L, November 26, 2002: US06487666 (418 worldwide citation)

A method of describing intrusion signatures, which are used by an intrusion detection system to detect attacks on a local network. The signatures are described using a “high level” syntax having features in common with regular expression and logical expression methodology. These high level signature ...


2
Steven D Shanklin, Thomas E Bernhard, Gerald S Lathem: Intrusion detection signature analysis using regular expressions and logical operators. Cisco Technology, Baker Botts L, September 14, 2004: US06792546 (136 worldwide citation)

A method of describing intrusion signatures, which are used by an intrusion detection system to detect attacks on a local network. The signatures are described using a “high level” syntax having features in common with regular expression and logical expression methodology. These high level signature ...