Single packet regular matching device and method thereof
A matching method and equipment technology, applied in the field of network security systems, can solve problems such as low matching performance and long time, and achieve the effects of improving matching performance, reducing matching time, and shortening the loading process
Active Publication Date: 2012-04-18
曙光网络科技有限公司
View PDF2 Cites 15 Cited by
- Summary
- Abstract
- Description
- Claims
- Application Information
AI Technical Summary
Problems solved by technology
[0004] Since the size of a large DFA is several hundred megabytes, and the general logic chip cannot integrate such a large-capacity internal memory, it can only be stored in an external SRAM (Static Random Access Memory, static random access memory) or SDRAM (Synchronous Dynamic Random Access Memory, Synchronous Dynamic Random Access Memory (DRAM), when matching, a part of the DFA segment is read out according to the current state and input characters and cached inside the logic chip. During the matching process, the data table items associated with the current state need to be continuously loaded, and often Jump and repeatedly load the data table items associated with the state, the more complex the DFA, the more data table items to load, the matching method in the prior art takes a long time, and the matching performance is low
Method used
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View moreImage
Smart Image Click on the blue labels to locate them in the text.
Smart ImageViewing Examples
Examples
Experimental program
Comparison scheme
Effect test
Embodiment Construction
[0025] Such as figure 1 As shown, the single-package regular matching device includes: a single-package regular matching unit and a cache unit connected to the single-package regular matching unit, and the single-package regular matching unit includes: a regular expression matching module and a Protocol variable matching module connected by expression matching module.
[0026] The cache unit includes: an off-chip cache for setting an off-chip DFA table and an on-chip cache for setting an on-chip protocol variable table; the off-chip cache is connected to the regular expression matching module, and the on-chip cache is connected to the on-chip cache The protocol variable described above matches the module connection.
[0027] The protocol variable matching module includes: a protocol variable matching engine module and a result processing module connected with the protocol variable matching engine module; the protocol variable matching engine module receives the message data f...
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More PUM
Login to View More Abstract
The invention provides a single packet regular matching device and a method thereof. The matching device comprises a single packet regular matching unit and a cache unit which is connected with the single packet regular matching unit. The single packet regular matching unit comprises a regular expression matching module and a protocol variable matching module which is connected with the regular expression matching module. The matching method is characterized by comprising: through grouping a plurality of regular expressions according to a protocol variable, respectively compiling each regular expression group, obtaining a plurality of DFAs (deterministic finiter automata), carrying out message matching by utilizing the protocol variable, and utilizing a matching result to load the DFAs so as to carry out regular expression matching. According to the device and the method of the invention, data needing to be loaded in a matching process is reduced, a loading process is shortened, regular expression matching time is reduced, and matching performance is raised.
Description
technical field [0001] The invention relates to a network security system, in particular to a single-packet regular matching device and method. Background technique [0002] A regular expression describes a pattern of string matching, which is used for text matching to find the part that matches a given regular expression in a given string. Regular expressions in the prior art have a wide range of applications, and are mainly used in the communication industry and network security fields to perform pattern matching checks on data traffic, such as protocol analysis, virus detection, and service classification. [0003] In the prior art, the regular expression matching check needs to be converted into a DFA (Deterministic Finiter Automata, finite automata) in advance, and then the logic chip executes the DFA according to the compiled DFA and the characters in the input data stream . However, when using it, generally there are not only one rule to be checked, but thousands of...
Claims
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More Application Information
Patent Timeline
Login to View More IPC IPC(8): H04L12/56H04L12/70
Inventor 纪奎李锋伟姬乃军刘兴奎
Owner 曙光网络科技有限公司