Still remember when first heard Aho-Corasick from the Snort IDS mailing list circa 2002. This paper described the optimization of Snort detection engine based on Aho-Corasick in the later version of Snort [1]. Not sure though which algorithm that the latest Snort 3 IDS is using for its detection engine [2].

[1] Optimizing Pattern Matching for Intrusion Detection:

https://www.semanticscholar.org/paper/Optimizing-Pattern-Mat...

[2] Snort:

https://www.snort.org/