STRING DETECTION SYSTEM AND METHOD OF DETECTING A STRING

A string detection system preferably includes a buffer for receiving data and parsing that data into strings, and a content addressable memory, connected to the buffer, for receiving the strings and comparing each string with entries in the content addressable memory. This string detection system may be incorporated in an intrusion detection system that monitors a data stream addressed to a host device or network. In an intrusion detection system, the string detection system monitors the data stream for strings which match attack signatures.