一种高性能的字符串匹配硬件实现法

A High-performance Hardware Implementation of String Matching

随着网络技术的快速发展和Internet的普及,网络的安全性越来越受到重视,字符串匹配作为实现网络安全检测的核心技术和实现难点,也越发受到人们的关注。文章提出了一种基于分离式状态表的硬件实现法,吸取了AC算法中自动跳转状态机的思想,能实现线速并行的匹配且具有较少的硬件开销,是一种高性能的多模式串匹配实现法。

With the high-speed development of network technologies and the popularity of Internet, network security is getting more and more important. As the key technique to implement network security detection, string matching is also drawing more and more attention. In this article, we put out an implementation based on separate-state-table, which adopts the idea of FSM from Aho-Corasick algorithm and can provide wire-speed,concurrent string matching with low hardware cost. Our implementation is proved to be a high-performance implementation of multi-pattern matching.