期刊文献+

一种正则表达式匹配的存储空间优化技术

An Optimized Method of Storage Space in Regular Expression Matching
下载PDF
导出
摘要 针对有限状态自动机DFA构造过程中出现状态爆炸导致存储空间大、匹配效率低等问题,提出一种基于规则分组及状态边压缩相结合的正则表达式引擎优化算法GCFA,通过将规则基于关联性进行分组,对各个分组所构造的联合DFA采用存储连续字符的范围代替单一字符以达到减少存储空间的目的。实验结果证明,与标准DFA构造算法相比较,GCFA算法对状态转移边的压缩率达到98%,与经典改进算法相比较,降低2个数量级的存储空间。 To solve the problems that state explosion, large storage space and low matching efficiency usually happen in the process of constructing the traditional finite state automaton such as NFA.DFA, proposes the regular expression engine optimization algorithm GCFA based on the combination of grouping rules and compressing the state transition edges. Though the analysis of the rules, combined the methods of grouping rules based on relevance and storing the contiguous characters instead of single ones when constructing the united DFAs in order to achieve the purpose of compacting the state transition edges and reduce the storage space. The results of experiments show that, compared with the standard DFA algorithm, GCFA makes the state transition edge's compression rate reach at 98%, and compared with the other classic construction algorithms of DFA, GCFA's storage space is reduced by 2 orders of magnitude.
出处 《现代计算机(中旬刊)》 2017年第7期8-12,共5页 Modern Computer
基金 国家自然科学基金(No.61472237) 上海市自然科学基金(No.14ZR1419700)
关键词 深度报文检测 网络安全 确定型有限状态自动机 正则表达式匹配 规则分组 Deep Packet Inspection Network Security Deterministic Finite Automaton Regular Expression Matching Multiple DFAs
  • 相关文献

参考文献4

二级参考文献67

  • 1VERN P. Bro: a system for detecting network intruders in real-time[J]. Computer Networks, 1999, 31(23):2435-2463.
  • 2MARTIN R. Snort - lightweight intrusion detection for networks[A]. Proc USENIX LISA[C]. Berkeley, USA. 1999. 229-238.
  • 3XU Y, JIANG J C, SONG Y, et al. i-DFA: a Novel Deterministic Finite Automaton without State Explosionp[R]. Polytechnic Institute of NYU 2010: Technical Report, 2010.
  • 4KUMAR S, DHARMAPURIKAR S, FANG Y, et al. Algorithms to accelerate multiple regular expressions matching for deep packet in- spection[J]. ACM SIGCOMM Computer Communication Review, 2006, 36(4): 339-350.
  • 5FICARA D, PIETRO A D, GIORDANO S, et al. Differential encoding of DFAs for fast regular expression matching[J]. IEEE/ACM Transactions on Networking (TON), 2011, 19(3):683 -694.
  • 6YU F, CHEN Z F, DIAO Y L, et al. Fast and memory-efficient regular expression matching for deep packet inspection[A]. Proc of the ANCS'06[C]. New York: ACM, 2006.93-102.
  • 7BECCHI M, CROWLEY P. A hybrid finite automaton for practical deep packet inspection[A]. Proc of the 2007 ACM CoNEXT Conference[C]. New York: ACM, 2007.
  • 8TANG Y, JIANG J, HU C, et al. Managing DFA history with queue for deflation DFA[J]. Journal of Network and Systems Management, 2012, 20(2):155-180.
  • 9AHO A V, LAM M S, SETHI R, et al. Compilers: Principles, Techniques, and Tools[M]. Boston: Addison Weslay, 1986.
  • 10YANG Y H, PRASANNA V. Space-time tradeoff in regular expression matching with semi-deterministic finite automata[A]. Proc of IEEE INFOCOM, 2011[C]. Piscataway, 2011. 1853-1861.

共引文献7

相关作者

内容加载中请稍等...

相关机构

内容加载中请稍等...

相关主题

内容加载中请稍等...

浏览历史

内容加载中请稍等...
;
使用帮助 返回顶部