期刊文献+

NetMagic平台上正则表达式匹配技术实现

A Regular Expression Matching Technology Based on Net Magic Platform
下载PDF
导出
摘要 在基于有限状态自动机的正则表达式匹配技术中,存储需求和匹配性能是一对相互制约的因素.统计分析发现,对于给定的自动机,状态的访问概率分布呈Zipf规律.为解决存储和性能的矛盾,设计并实现了基于Net Magic的两级存储的匹配引擎;根据状态的访问概率特性,将访问概率较高的状态配置在小容量的高速存储器中,访问概率较低的状态配置在大容量的低速存储器中,从而达到存储与性能的平衡.同时利用FPGA内部多RAM块特性,实例化多个匹配引擎,进一步使匹配速度线性提升.在资源充裕的条件下,理论上可达到65Gbps的吞吐量.实验表明单位存储代价大幅降低,但受限于Net Magic存储资源、频率及端口速率,实际性能为2.1Gbps. In the field of regular expression matching based on finite state machine,storage requirement and matching performance con- dition each other. Statistics shows that for a given automata,the access probabilities of states follow the Zipf distribution. To solve the contradiction between space and performance,this paper designs a matching engine with two-level memory on the basis of NetMagic platform, and the state transition table is deployed according to the access probabilities. The states with high access probabilities are stored in high-speed memory with small capacity, and states with low access probabilities are stored in low-speed memory with large capacity, thus achieving a balance between storage and performance. Furthermore, the multi-block RAM in FPGA is configured as multi-engine. As a result,the matching speed is accelerated multiple times. Under the condition of abundant resources,the throughput can reach 65 Gbps in theory. The result shows that,the storage cost reduces significantly. As limited by the storage resources, frequency and port rate of NetMagic, the actual performance is 2.1Gbps.
出处 《小型微型计算机系统》 CSCD 北大核心 2015年第2期280-284,共5页 Journal of Chinese Computer Systems
基金 国家"八六三"高技术研究发展计划基金项目(2011AA01A103)资助
关键词 正则表达式 访问概率 两级存储 NetMagic regular expression access probability two-level memory NetMagic
  • 相关文献

参考文献17

  • 1L7 filterl EB/OL]. http://17-filter, sourceforge, net,2013.
  • 2Snort [ EB/OL ]. http ://www. snort, org,2013.
  • 3Bro Intrusion Detectopn system [ EB/OL ]. http ://broAds. org/Over- view. htm1,2013.
  • 4Yu F, Chen Z, Diao Y, et al. Fast and memory-efficient regular ex- pression matching for deep packet inspection [ J ]. Architecture for Networking and Communications Systems, ANCS2006, ACM/IEEE Symposium on. IEEE,2006:93-102.
  • 5张树壮,罗浩,方滨兴.面向网络安全的正则表达式匹配技术[J].软件学报,2011,22(8):1838-1854. 被引量:28
  • 6Tran Trung Hieu, Tran Ngoc Thinh, ShiGenori Tomiyama. EN- REM:an efficient NFA-based regular expression matching engine on reconfigurable hardware for NIDS[ J]. Journal of Systems Archi- tecture,2013,59(4) :202-212.
  • 7Hiroki Nakahara,Tsutomu Sasao, Munehiro Matsuura, A regular ex- pression matching circuit:decomposed non-deterministic realization with prefix sharing and multi-character transition [ J ]. Microproces- sors and Microsystems ,2012,36( 8 ) :644-664.
  • 8Vasiliadis G, Polychronakis M, Ioannidis S. Midea: a multi-parallel intrusion detection architecture[C ]. Proceedings of the 18th ACM Conference on Computer and Communications Security, ser. CCS 11. New York,NY,USA:ACM,2011:297-308.
  • 9Lin C H, Liu C H, Chang S C. Accelerating regular expression matching using hierarchical parallel machines on gpu [ C ]. IEEE Globecom 2011, Houston, Texas, USA, December,2011 : 1-5.
  • 10Meiners C R, Patel J, Norige E, et al. Fast regular expression matc- hing using small tcams for network intrusion detection and preven- tion systems[ C]. Proceedings of the 19th USENIX Conference on Security, USENIX Association,2010.

二级参考文献18

  • 1李伟男,鄂跃鹏,葛敬国,钱华林.多模式匹配算法及硬件实现[J].软件学报,2006,17(12):2403-2415. 被引量:42
  • 2曹京,谭建龙,刘萍,郭莉.布尔表达式匹配问题研究[J].计算机应用研究,2007,24(9):70-72. 被引量:5
  • 3Aho A V, Corasick M J. Efficient string matching: An aid to bibliographic search [J]. Communications of the ACM, 1975, 18(6): 333-340.
  • 4Tuck N, Sherwood T, Calder B, et al. Deterministic memory efficient string matching algorithms for intrusion detection [C] //Proc of the IEEE INFOCOM 2004. Piscataway, NJ: IEEE Press, 2004:333-340.
  • 5Fang Yu, Randy H Katz, Lakshman T V. Gigabit rate packet pattern-matching using TCAM[C] //Proc of the 12th IEEE Int'l Conf on Network Protocols (ICNP' 04). Washington: IEEE Computer Society, 2004.
  • 6Application Layer Packet Classifier for Linux[OL]. [2007-02-14]. http://17-filter, sourceforge, net.
  • 7IPP2P[OL]. [2007-02-14]. http://www, ipp2p, org.
  • 8Snort. Network Intrusion Detection System[OL]. [2007-02- 14]. http://www, snort, org.
  • 9Bro. Intrusion Detection System [ OL]. [ 2007-02-14 ]. http ://bro ids. org/Overview.
  • 10Fang Yu, Zhifeng Chen, Yanlei Diao. Fast and memory-efficient regular expression matching for deep packet inspection, UCB/EECS-2006-76 [R/OL]. Berkeley: University of California, 2006. [2007-02-14]. http://www. eecs. berkeley, edu/Pubs/TechRpts/2006/EECS-2006-76, html.

共引文献40

相关作者

内容加载中请稍等...

相关机构

内容加载中请稍等...

相关主题

内容加载中请稍等...

浏览历史

内容加载中请稍等...
;
使用帮助 返回顶部