Quote:
Originally Posted by alephz
If anyone need a real example of signature search, I can recommend ClamAV source. |
After some reading it appears to be using Aho-Corasick or the Booyer-more string search algorithms, which is nice indeed. It is very unfortunate that the signature search is so tightly integrated with the codebase, otherwise I would have added it to the tests...