期刊文献+

基于规则模板的正则表达式分组算法 被引量:8

A Regular Expression Grouping Algorithm Based on Signature Templates
下载PDF
导出
摘要 采用规则分组的方法解决确定型有限自动机(Deterministic Finite Automata,DFA)状态爆炸问题,随着分组数目的增加,匹配效率大大降低.本文提出正则表达式的输入驱动特性理论,并基于此提出了基于规则模板的分组算法——模板有限自动机.模板有限自动机算法基于规则模板对规则集进行分组,各分组分别构建匹配引擎.理论分析和实验表明,与典型的DFA改进算法相比,预处理时间和存储空间有2~3个数量级别的缩减,且匹配效率没有明显降低. As the group number grows,the classical signature grouping algorithm solves the DFA state explosion problem with a big decrease on matching efficiency. This paper presents a regular expression( Regex) input drive theory. According to such theory,a grouping algorithm based on signature templates,templates based finite automata( TFA),is proposed. TFA divides Regex set based on signature templates and constructs matching engines in each set. Experiment results showthat the preprocessing time and storage are reduced by 2 ~ 3 orders of magnitude compared with classical DFA improved algorithms,and TFA brings no obvious decrease on matching efficiency.
出处 《电子学报》 EI CAS CSCD 北大核心 2016年第1期236-240,共5页 Acta Electronica Sinica
基金 国家973重点基础研究发展计划(No.2013CB329104)
关键词 正则表达式 确定型有限自动机 分组自动机 扩展有限自动机 多维有限自动机 规则模板 regular expression deterministic finite automata multiple DFAs extended finite automata multi-dimensional finite automata signature templates
  • 相关文献

参考文献13

  • 1Yu F, Chen Z, Diao Y, et al. Fast and memory-efficient reg- ular expression matching for deep packet inspection[ A ]. Proc of the IEEE/ACM Symp on Architectures for Networ- king and Communications Systems I C ]. IEEE, 2006. 93 102.
  • 2Hopcroft J E. Introduction to Automata Theory, Languages, and Computation[ M]. Pearson Addison Wesley ,2007.
  • 3徐乾,鄂跃鹏,葛敬国,钱华林.深度包检测中一种高效的正则表达式压缩算法[J].软件学报,2009,20(8):2214-2226. 被引量:28
  • 4乔登科,王卿,柳厅文,孙永,郭莉.基于状态分组的高效i-DFA构造技术[J].通信学报,2013,34(8):102-109. 被引量:4
  • 5Becchi M, Crowley P. A hybrid finite automaton for practi- cal deep packet inspection [ A ]. Proceedings of the 2007 ACM CoNEXT Conference [ C] . ACM,2007.1.
  • 6张树壮,罗浩,方滨兴.面向网络安全的正则表达式匹配技术[J].软件学报,2011,22(8):1838-1854. 被引量:29
  • 7Kumar S, Dharmapurikar S, Yu F, et al. Algorithms to ac- celerate multiple regular expressions matching for deep packet inspection [ J ]. ACM SIGCOMM Computer Com- munication Review,2006,36 (4) 339 - 350.
  • 8Ficara D, Giordano S, Procissi G, et al. An improved DFA for fast regular expression matching [ J ]. ACM SIGCOMM Computer Communication Review, 2008,38 (5) :29 - 40.
  • 9Liu T, Yang Y, Liu Y, et al. An efficient regular expres- sions compression algorithm from a new perspective[ A ]. Proceedings of IEEE INFOCOM 2001 I C ]. IEEE, 2011. 2129 -2137.
  • 10Smith R, Estan C, Jha S, et al. Deflating the big bang : fast and scalable deep packet inspection with extended finite automata [ J ]. ACM SIGCOMM Computer Communica- tion Review, 2008,38 ( 4 ) : 207 - 218.

二级参考文献31

  • 1李伟男,鄂跃鹏,葛敬国,钱华林.多模式匹配算法及硬件实现[J].软件学报,2006,17(12):2403-2415. 被引量:42
  • 2曹京,谭建龙,刘萍,郭莉.布尔表达式匹配问题研究[J].计算机应用研究,2007,24(9):70-72. 被引量:5
  • 3VERN P. Bro: a system for detecting network intruders in real-time[J]. Computer Networks, 1999, 31(23):2435-2463.
  • 4MARTIN R. Snort - lightweight intrusion detection for networks[A]. Proc USENIX LISA[C]. Berkeley, USA. 1999. 229-238.
  • 5XU Y, JIANG J C, SONG Y, et al. i-DFA: a Novel Deterministic Finite Automaton without State Explosionp[R]. Polytechnic Institute of NYU 2010: Technical Report, 2010.
  • 6KUMAR S, DHARMAPURIKAR S, FANG Y, et al. Algorithms to accelerate multiple regular expressions matching for deep packet in- spection[J]. ACM SIGCOMM Computer Communication Review, 2006, 36(4): 339-350.
  • 7FICARA D, PIETRO A D, GIORDANO S, et al. Differential encoding of DFAs for fast regular expression matching[J]. IEEE/ACM Transactions on Networking (TON), 2011, 19(3):683 -694.
  • 8YU F, CHEN Z F, DIAO Y L, et al. Fast and memory-efficient regular expression matching for deep packet inspection[A]. Proc of the ANCS'06[C]. New York: ACM, 2006.93-102.
  • 9BECCHI M, CROWLEY P. A hybrid finite automaton for practical deep packet inspection[A]. Proc of the 2007 ACM CoNEXT Conference[C]. New York: ACM, 2007.
  • 10TANG Y, JIANG J, HU C, et al. Managing DFA history with queue for deflation DFA[J]. Journal of Network and Systems Management, 2012, 20(2):155-180.

共引文献52

同被引文献36

引证文献8

二级引证文献18

相关作者

内容加载中请稍等...

相关机构

内容加载中请稍等...

相关主题

内容加载中请稍等...

浏览历史

内容加载中请稍等...
;
使用帮助 返回顶部