Regular expression matching method and device, electronic equipment and storage medium

Abstract

The embodiment of the invention provides a regular expression matching method and a device, electronic equipment and a storage medium. The method comprises the steps of after character strings identifying each regular expression are extracted, dividing the character strings into fixed-length substrings; and filtering the target regular expression with good matching with the to-be-matched characterstring through the fixed-length substring, and further determining whether the to-be-matched character string is network attack data or viruses through the target regular expression. Since the character string is divided into the fixed-length sub-strings, only all possible character strings of which the length is the fixed-length sub-strings and which are composed of characters need to be storedin the filter. Compared with the mode of storing each character string with the complete regular expression, the required storage space is greatly reduced, the maximum storage space required by all possible character strings of the fixed-length substring is controllable, and the memory overflow error of the filter can be avoided.

Description

technical field [0001] The invention relates to the technical field of computers, in particular to a regular expression matching method, device, electronic equipment and storage medium. Background technique [0002] Massive (tens of millions) regular expression matching engines are usually implemented using filtering methods, including two core modules: "filter" and "verifier". The "filter" is realized by the extracted effective fingerprint construction automaton, and the "verifier" is realized by the NFA-DFA regular expression engine. However, the existing "effective fingerprint" extraction algorithms are all aimed at the key substring of the "connection" operation, without considering the "or" operation of regular expressions, so the filtering ability is low, and the length of the "effective fingerprint" is uncontrollable. Prone to memory overflow errors. [0003] Therefore, in the actual application process, since the length of the regular expression is uncontrollable, ...

AI Technical Summary

Problems solved by technology

[0004] Embodiments of the present invention provide a regular expression matching method, device, electronic equipment, and storage medium to solve the problem in the prior art that the length of the regular expression is uncontrollable. When using large-scale regular expressions, the filter needs a lot of space to store the "effective fingerprint" of the regular expression, which is prone to memory overflow and memory overflow errors.

Images