Regular expression-oriented multi-mode matching hardware engine and generating method

A multi-pattern matching and expression technology, applied in the field of engine generation, can solve problems such as high resource consumption, difficulty in meeting large-scale regular expression matching tasks, and limited hardware resources

Inactive Publication Date: 2010-08-04
HARBIN ENG UNIV
View PDF0 Cites 7 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

With the rapid increase of network speed, the misuse of intrusion detection system gradually exposes its fatal flaws in performance: low detection rate and large resource consumption
However, these methods using DFA theory inevitably face the problem of limited hardware resources. Compared with NFA, the number of states in DFA implementation increases exponentially, which makes it difficult for existing FPGA hardware to meet large-scale regular expressions. pattern matching task

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Regular expression-oriented multi-mode matching hardware engine and generating method
  • Regular expression-oriented multi-mode matching hardware engine and generating method
  • Regular expression-oriented multi-mode matching hardware engine and generating method

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0027] The present invention is described in more detail below in conjunction with accompanying drawing example:

[0028] Functional unit module

[0029] The functional unit modules are divided into three types according to different forms: general modules, wiring mode modules and special character modules. Among them, common modules (such as figure 2 , 3 , shown in 4) include: character matching module, .symbol module and counter module; wiring mode module (such as Figure 5 , 6 , 7, 8) include: + character module, * character module, ? character modules and |character modules; special character modules such as Figure 9 , 10 , 11, 12) include: \s module, \n module, \d module and \r module. Its module features are as follows:

[0030] common module

[0031] 1) Character matching module

[0032] Structure: The character matching module consists of two independent comparators, two D flip-flops and an OR gate. The two comparators have two input terminals and one outp...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

PUM

No PUM Login to view more

Abstract

The invention provides a regular expression-oriented multi-mode matching hardware engine and a generating method. The regular expression-oriented multi-mode matching hardware engine is formed by parallelly combining a plurality of single-mode matching engines, wherein the odd and even data buses of the plurality of single-mode matching engines are connected to odd and even input data RAMs. The generating method comprises the following steps: extracting basic functional unit modules from mode matching by adopting a modular design method; sequentially combining the basic functional unit modulesto generate a single-rule matching engine according to the specific structure of each rule; generating a plurality of single-rule matching engines by the same method; and parallelly performing the single-rule matching engines to finish the mode matching. The throughput rate of the mode matching is improved through parallel multi-mode judgement and double-data channel technology. The multi-mode matching hardware engine and the generating method of the invention can be used for reducing the calculation bottleneck of an intrusion detection system in the mode matching.

Description

technical field [0001] The invention relates to a regular expression-oriented multi-pattern matching engine based on FPGA hardware equipment. The invention also relates to a method for generating an engine. Background technique [0002] Misuse of the intrusion detection system as the current mainstream network intrusion detection system has the characteristics of high judgment accuracy and low false alarm rate. This type of system is based on the accumulation of knowledge of various known network intrusion methods and system defects in the past , to achieve the purpose of ensuring security based on the detection of these known patterns. Therefore, pattern library and pattern matching are the core of misuse intrusion detection system. With the rapid increase of network speed, the misuse of intrusion detection system gradually exposes its fatal flaws in performance: low detection rate and large resource consumption. Especially when the intrusion pattern library is constantl...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

Application Information

Patent Timeline
no application Login to view more
Patent Type & Authority Applications(China)
IPC IPC(8): G06F17/30
Inventor 吴艳霞顾国昌温源王吉发王玉洁高艳兵林志强刘海波沈晶孙颖
Owner HARBIN ENG UNIV
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Try Eureka
PatSnap group products

Browse by: Latest US Patents, China's latest patents, Technical Efficacy Thesaurus, Application Domain, Technology Topic.

© 2024 PatSnap. All rights reserved.Legal|Privacy policy|Modern Slavery Act Transparency Statement|Sitemap