Signature-based detection is essentially a string-matchingproblem. This means that it keeps searching for a patternor a sub-string in a collection of patterns or large strings.This process dominates most of the processing time (40% to70% of the time [1])