期刊文献+

一种新的确定型有限自动机状态表示及压缩

A Novel Deterministic Finite Automata State Representation and Compression
下载PDF
导出
摘要 针对传统DFA存在时间复杂度和空间复杂度高的问题,提出了一种新的DFA状态表示和字符-状态压缩方案。通过对传统DFA状态转换的观察发现,对于一个给定的输入来说,可以仅存储相邻状态之间的差异,从而得到一种新的DFA状态表示N-DFA;对每个大小不固定的状态设置一个状态指针来有效地减少每个指针所需要的比特数,从而得到一种基于输入字符的字符-状态压缩算法C-S;把N-DFA和C-S有效地集成在一起,进一步减少内存。实验结果表明,提出的N-DFA和C-S集成方案相比于传统的DFA和其他改进DFA方案,可以获得更好的内存压缩和加速性能。 In view of the high time complexity and space complexity existing in traditional DFA,a new DFA state representation and character-state compression scheme is proposed.Firstly,through observing the state transitions of the traditional DFA,it is found that,for a given input,only the differences between adjacent states can be stored and a new DFA state representation,namely NDFAs,can be obtained.Secondly,a state pointer for each size unfixed state is required to reduce effectively the number of bits required for each pointer so as to obtain a character-state compression algorithm based on the input characters,referred simply to as C-S.Finally,the C-S can be integrated effectively within the N-DFA to reduce memory further.Experimental results show that the proposed NDFA and C-S integration schemes can achieve better memory compression and speedup performance compared with traditional DFA and other improved DFA schemes.
作者 张蕾 于凯 王思秀 陆光 ZHANG Lei;YU Kai;WANG Si-xiu;LU Guang(College of Computer Science and Engineering,Xinjiang University of Finance and Economics,Urumqi 830012,China;School of Computer and Information Technology,University of Science and Technology Beijing,Beijing 100083,China)
出处 《火力与指挥控制》 CSCD 北大核心 2020年第1期12-17,共6页 Fire Control & Command Control
基金 国家自然科学地区基金(71561025) 新疆维吾尔自治区高校科研计划青年基金资助项目(XJEDU2017S036)
关键词 深度包检测 有限自动机 内存压缩 正则表达式 状态指针 deep packet inspection finite automata memory compression regular expression state pointer
  • 相关文献

参考文献1

二级参考文献26

  • 1范慧萍,宣蕾,陈曙晖,黄高平.基于正则表达式的应用层协议识别加速[J].计算机研究与发展,2008,45(z1):438-443. 被引量:9
  • 2Paxson V, Asanovic K, Dharmapurikar S, et al. Rethinking hardware support for network analysis and intrusion prevention [C] //Proc of the 15th USENIX Workshop on Hot Topics in Security. Berkeley, CA: USENIX Association, 2006:63-68.
  • 3Sommer R, Paxson V. Enhancing byteleve network intrusion detection signatures with context[C] //Proc of the lOth ACM Conf on Computer and Communications Security. New York= ACM, 2003= 262-271.
  • 4Snort. Snort: :rules[EB/OL]. (2014-02 07) [2014-03-04]. http://www, snort, org/start/rules.
  • 5Bro. The bro network security monitor [EB/OL]. (2013 11- 08) [2014 03-04]. http://www, bro. org/.
  • 6HP. TippingPoint next generation intrusion prevention system (NGIPS) [EB/OL]. (2013-05 08) [-2014-03-041. http//wwwS, hp. com/us/en/software solutions/software. html?compURI 1343617.
  • 7Cisco. Instrusion prevention system (IPS) Cisco systems [EB/OL]. (2013-05-08) [2014 03-04]. http://www, cisco. corn/c/en/us/produets/securit y/intrusion-prevention-syst em ips/ index, html.
  • 8Yu Fang, Katz R H, Lakshman T V. Gigabit rate packet pattern- matching using TCAM [C] //Proc of the 12th IEEE Int Cont" on Network Protocols. Piscataway, N J: IEEE, 2004:174-183.
  • 9Meiners C R, Patel J, Norige E, et al. Fast regular expression matching using small TCAMs for network intrusion detection and prevention systems [C] //Proc of the 19th USENIX Security Symp. Berkeley, CA: USENIX Association, 2010:1-16.
  • 10Peng Kunyang, Tang Siyuan, Chen Min, et al. Chain-based DFA deflation for fast and scalable regular expression matching using TCAM [C] //Proc of the 7th ACM/IEEE Symp on Architectures for Networking and Communications Systems. NewYork ACM, 2011:24-35.

共引文献7

相关作者

内容加载中请稍等...

相关机构

内容加载中请稍等...

相关主题

内容加载中请稍等...

浏览历史

内容加载中请稍等...
;
使用帮助 返回顶部