期刊文献+

基于TCAM的K步长多模式匹配算法及硬件实现 被引量:1

TCAM-Based K-Step Multi-Pattern Matching Algorithm and Hardware Implementation Research
下载PDF
导出
摘要 对K步长状态机进行改进,消除了各状态的失效链,节省了存储资源,提高了匹配效率;根据TCAM(Ternary Content Addressable Memory)的并行查找和精确查找的特性,设计了一种用FPGA实现TCAM的方法,并以此作为基本匹配单元;最后结合改进的K步长状态机和基本匹配单元设计了一个快速多模式匹配系统.接收网络数据流进行实验,结果证明设计的匹配系统能达到数千兆位的吞吐率. Through the improvement of K--step state machine, failure chain of every state is removed which saves storage resources and improves the matching efficiency. Besides, combined with the characteristics of parallel searching and accurate searching of TCAM(Ternary Content Addressahle Memory), FPGA is used to implement TCAM as the basic matching cell, which the matching speed is significantly improved. Finally a fast multi--pattern matching system is designed based on improved K--step state machine and the basic matching cell. Networkstream is received for experiment. The result of the experiment is proved that the matching system can achieve multi-- gigabit throughput.
出处 《微电子学与计算机》 CSCD 北大核心 2013年第4期46-49,共4页 Microelectronics & Computer
关键词 多模式匹配 K步长状态机 三态内容寻址存储器 现场可编程门阵列 multi--pattern matching K--step state machine TCAM FPGA
  • 相关文献

参考文献6

  • 1Sarang Dharmapurikar, Lockwood John. Fast and scalable pattern matching for network instrusion detection systems[J]. IEEE, 2006, 24(10): 1781-1792.
  • 2Brelet Jean-Louis. Using block RAM for high perforrnance read/write TCAMs [EB/OL]. Xilinx XAPP204[2012-4-19]. http://www. xilinx.com.
  • 3冯安.基于Bloom Filter的硬件字符串匹配设计与验证[J].图像·编码与软件,2009,22(12):63-68.
  • 4Sourdis I. Pre-decoded TCAMs for efficient and high -speed NIDS pattern matching[C] // Proceedings of the 12th Annual IEEE Symposium on Field-Programmable Custom Computing Machines (FCCM' 04). California: Napa Valley, 2004 : 258- 267.
  • 5Fang Yu, Katz R H, Lakshman T V. Gigabit rate packet pattern-matching using TTCAM[C] // Proceeding of 12th IEEE International Conference on Network Protocol. Berlin, Germany, 2004: 174-183.
  • 6Son H, Lockwood J. Multi-pattern singature matching of hardware network intrusion detection systems [C]//Global Telecommunications Conference. New York. 2005: 1686- 1690.

同被引文献1

引证文献1

二级引证文献1

相关作者

内容加载中请稍等...

相关机构

内容加载中请稍等...

相关主题

内容加载中请稍等...

浏览历史

内容加载中请稍等...
;
使用帮助 返回顶部