期刊文献+
任意字段
题名或关键词
题名
关键词
文摘
作者
第一作者
机构
刊名
分类号
参考文献
作者简介
基金资助
栏目信息

一种改进的XFA在深度包检测中的应用 被引量：1

Improved XFA for deep packet inspection
下载PDF
导出
摘要 提出了一种应用于深度包检测的改进XFA。该算法在XFA的分支迁移边上添加判断指令,消除XFA存在冗余迁移边的问题;采用并行检测机制,将匹配线程升级为两个并行的线程,预统计线程和状态机匹配线程,加快匹配速度。实验验证该算法有更快的运行速度和稳定性,适合多核计算环境。 An improved XFA for deep packet inspection is proposed. Firstly the branching transitions are augmented with the check instruction and the backward transitions are eliminated; then the parallel detection mechanism is used, the original thread is replaced by the two parallel threads which are in order to accelerate the speed of match- ing： the pre statistical thread and the state machine matching thread. The experiments show the algorithm has a faster speed and stability, and is suitable for multi-core computing environments.
作者 魏德志 洪联系 林丽娜 吴旭
机构地区 集美大学诚毅学院
出处 《计算机工程与应用》 CSCD 2012年第34期245-248,共4页 Computer Engineering and Applications
基金 福建省仿脑智能系统重点实验室开放课题项目(No.BLISSOS2010103) 福建省教育厅基金(No.JB0732)
关键词 正则表达式 深度包检测 并行线程 扩展有限自动机 网络安全 regular expression deep packet inspection parallel threads extended finite automata network security
分类号 TP393 [自动化与计算机技术—计算机应用技术]
  • 相关文献

参考文献11

  • 1Kumar S, Dharmapurikar S, Yu Fang, et al.Algorithms to accelerate multiple regular expressions matching for deep packet inspection[C]//Proceedings of the 2006 Conference on Applications, Technologies, Architectures, and Protocols for Computer Communications.New York: ACM Press, 2006: 339-350.
  • 2Smith R, Estan C,Jha S.XFA:faster signature matching with extended automata[C]//Proceedings of the 2008 IEEE Symposium Security and Privacy.Washington, DC: IEEE, 2008 : 187-201.
  • 3Becchi M, Crowley RExtending finite automata to effi- ciently nmteh Perl-compatible regular ex pressions[C]// Proceedings of the 2008 ACM CoNEXT Conference. New York. ACM Press, 2008.
  • 4Xie T, Feng D G.A new differential for MD5 with its full differential path[EB/OL].[2009-04-10].http://print.iacr. org/2008/230.pdf.
  • 5Yu F, Chen Z, Diao Y, et al.Fast and memory-efficient regular expression matching for deep packet inspection[C]// Proceedings of the 2006 ACM/IEEE Symposium on Ar- chitecture for Net Systems Working and Communica- tions.New York: ACM Press, 2006: 93-102.
  • 6徐乾,鄂跃鹏,葛敬国,钱华林.深度包检测中一种高效的正则表达式压缩算法[J].软件学报,2009,20(8):2214-2226. 被引量：28
  • 7于强,霍红卫.一组提高存储效率的深度包检测算法[J].软件学报,2011,22(1):149-163. 被引量：14
  • 8金军航,张大方,黄昆.高性能正则表达式匹配算法评估[J].计算机工程,2010,36(19):269-271. 被引量：4
  • 9姚远,刘鹏,单征,田双鹏.面向存储的正则表达式匹配算法综述[J].计算机应用,2009,29(12):3171-3173. 被引量：13
  • 10范书义,孟晨,王成.一种新的DFA状态最小化算法[J].计算机工程与应用,2012,48(1):47-48. 被引量：2

二级参考文献54

  • 1李伟男,鄂跃鹏,葛敬国,钱华林.多模式匹配算法及硬件实现[J].软件学报,2006,17(12):2403-2415. 被引量：42
  • 2MITRA A, NAJJAR W, BHUYAN L. Compiling PCRE to FPGA for accelerating SNORT IDS [C]//Proceedings of the 3rd ACM/IEEE Symposium on Architecture for networking and Communications Systems. New York: ACM Press, 2007:127 - 136.
  • 3BRODIE B, CYTRON R K, TAYLOR D E. A scalable architecture for high-throughput regular-expression pattern matching [ C ]// ISCA '06: Proceedings of the 33rd Annual Intemational Symposium on Computer Architecture. New York: ACM Press, 2006:191 - 202.
  • 4LEE J, HWANG S H, PARK N. A high performance NIDS using FPGA-based regular expression matching [ C]// Proceedings of the 2007 ACM Symposium on Applied Computing. New York: ACM Press, 2007:1187 - 1191.
  • 5LO C-T D, TAI Y-G, PSARRIS K. Hardware implementation for network intrusion detection rules with regular expression support [C]//Proceedings of the 2008 ACM Symposium on Applied Computing. New York: ACM Press, 2008: 1535- 1539.
  • 6KUMAR S, DHARMAPURIKAR S, YU F, et al. Algorithms to accelerate multiple regular expressions matching for deep packet inspection [C]// Proceedings of the 2006 Conference on Applications, Technologies, Architectures, and Protocols for Computer Communications. New York: ACM Press, 2006:339-350.
  • 7KUMAR S, TURNER J, WILLIAMS J. Advanced algorithms for fast and scalable deep packet inspection [C]//Proceedings of the 2006 ACM/IEEE Symposium on Architecture for Networking and Communications Systems. New York: ACM Press, 2006:81 -92.
  • 8BECCHI M, CROWLEY P. An improved algorithm to accelerate regular expression evaluation [ C]// Proceedings of the 3rd ACM/ IEEE Symposium on Architecture for Networking and Communications Systems. New York: ACM Press, 2007, 145 - 154.
  • 9FICARA D, GIORDANO S, PROCISSI G, et al. An improved DFA for fast regular expression matching [J]. ACM SIGCOMM Computer Communication Review, 2008,38(5) :29 -40.
  • 10SMITH R, ESTAN C, JHA S. Xfa: Faster signature matching with extended automata [C]// Proceedings of the 2008 IEEE Symposium on Security and Privacy. Washington, DC: IEEE, 2008:187 -201.

共引文献50

同被引文献8

  • 1Snort 2.9.7.3.2016.http ://www. snort, org.
  • 2DIEN N K,HIEU T T,THINH T N.Memory-based multi- pattern signature scanning for clamAV antivirus[M].Future Data and Security Engineering.Springer International Publishing, 2014 : 58-70.
  • 3KUMAR S,DHARMAPURIKAR S,YU F,et al.Algorithms to accelerate multiple regular expressions matching for deep packet inspection[C].Proceedings of the 2006 Conference on Applications, Technologies, Architectures, and Protocols for Computer Communications.New York:ACM Press,2006 339-350.
  • 4BECCHI M,ROWL C E P.A hybrid finite automaton for practical deep packet inspection.Proceedings of the ACM CoNEXT.New York, 2007: 1-12.
  • 5AEZIPOUR M, NOURANI M.Constraint repetition inspection for regular expression on FPGA[C].Proc.of the 2008 16th IEEE Symp.on High Performance Interconnects.Washington 2008.111-118.
  • 6LONG H L,HIEU T T,TAI V T,et al.ECEB :enhanced constraint repetition block for regular expression matching on FPGA[J].ECTI Transactions on Electrical Engineering,Electronics, and Communications, 2011,9 : 65-74.
  • 7张树壮,罗浩,方滨兴,云晓春.一种面向网络安全检测的高性能正则表达式匹配算法[J].计算机学报,2010,33(10):1976-1986. 被引量：27
  • 8张树壮,罗浩,方滨兴.面向网络安全的正则表达式匹配技术[J].软件学报,2011,22(8):1838-1854. 被引量：29

引证文献1

计算机工程与应用
2012年 第34期

相关作者

内容加载中请稍等...

相关机构

内容加载中请稍等...

相关主题

内容加载中请稍等...

浏览历史

内容加载中请稍等...
;
使用帮助 返回顶部