Sciweavers

GLOBECOM
2010
IEEE

Independent Parallel Compact Finite Automatons for Accelerating Multi-String Matching

13 years 1 months ago
Independent Parallel Compact Finite Automatons for Accelerating Multi-String Matching
Multi-string matching is a key technique for implementing network security applications like Network Intrusion Detection Systems (NIDS) and anti-virus scanners. Existing DFA-based researches have claimed to achieve high speed throughput at an expenses of extremely high memory cost, so fail to be used in the embedded systems like high speed routers where very tight on-chip resources are available. This paper extends the classic longest prefix principle from single-character to multi-character string matching and proposes a multi-string matching acceleration scheme named Independent Parallel Compact Finite Automata (PC-FA). The scheme can be understood as consisting of k PC-FAs, each of which can process one character from the input stream, achieving a speedup up to k with reduced memory occupation. Theoretical proof is given for the equivalency between traditional DFA and PC-FA approach. Experimental evaluations with Snort and ClamAV show that seven times of speedup can be practically a...
Yi Tang, Junchen Jiang, Xiaofei Wang, Bin Liu, Yan
Added 11 Feb 2011
Updated 11 Feb 2011
Type Journal
Year 2010
Where GLOBECOM
Authors Yi Tang, Junchen Jiang, Xiaofei Wang, Bin Liu, Yang Xu
Comments (0)