Performance of a pattern-matching intrusion detection system (IDS) is improved by ranking signatures in its signature table by likelihood of occurrence, so that the table may be searched efficiently. Occurrence data associated with signatures is kept, and the ranking adaptively revised according to updates...http://www.google.ca/patents/US7150043?utm_source=gb-gplus-sharePatent US7150043 - Intrusion detection method and signature table
