Improved deep packet inspection in data stream detection

被引:13
作者
Yin, Chunyong [1 ]
Wang, Hongyi [1 ]
Yin, Xiang [2 ]
Sun, Ruxia [1 ]
Wang, Jin [3 ]
机构
[1] Nanjing Univ Informat Sci & Technol, Jiangsu Engn Ctr Network Monitoring, Sch Comp & Software, Nanjing 210044, Jiangsu, Peoples R China
[2] Yangzhou Univ, Coll Informat Engn, Yangzhou 225127, Jiangsu, Peoples R China
[3] Changsha Univ Sci & Technol, Sch Comp & Commun Engn, Changsha 410004, Hunan, Peoples R China
基金
中国国家自然科学基金;
关键词
Regular expression; NFA; Conversion edges; Deep packet inspection; REGULAR EXPRESSIONS; SYSTEM;
D O I
10.1007/s11227-018-2685-y
中图分类号
TP3 [计算技术、计算机技术];
学科分类号
0812 ;
摘要
Finite state automata are widely used in firewalls, data detection and content audit systems to match complex sets of regular expressions in network packets. However, with the continuous increase in the types of network contents and network traffics in recent years, the deep packet inspection systems based on finite state automata also require regular engines for less memory consumption and higher operating speed. This paper analyzes the feature and problem of finite state automata and improves non-deterministic finite automata by reducing the conversion edge to reduce the memory usage. The experiment results which are made by real-world dataset show that the memory usage is reduced more than half.
引用
收藏
页码:4295 / 4308
页数:14
相关论文
共 28 条
  • [1] Scalable Lookahead Regular Expression Detection System for Deep Packet Inspection
    Bando, Masanori
    Artan, N. Sertac
    Chao, H. Jonathan
    [J]. IEEE-ACM TRANSACTIONS ON NETWORKING, 2012, 20 (03) : 699 - 714
  • [2] ZIMMERMANN'S SUBTRACTION SCHEME AND THE PERTURBATIVE SOLUTION TO THE RENORMALIZATION GROUP EVOLUTION EQUATIONS
    Becchi, Carlo
    [J]. QUANTUM FIELD THEORY AND BEYOND: ESSAYS IN HONOR OF WOLFHART ZIMMERMANN, 2008, : 1 - 15
  • [3] Becchi M., 2007, P 2007 ACM CONEXT C, P1
  • [4] REGULAR EXPRESSIONS INTO FINITE AUTOMATA
    BRUGGEMANNKLEIN, A
    [J]. THEORETICAL COMPUTER SCIENCE, 1993, 120 (02) : 197 - 213
  • [5] Deep packet inspection using parallel bloom filters
    Dharmapurikar, S
    Krishnamurthy, P
    Sproull, TS
    Lockwood, JW
    [J]. IEEE MICRO, 2004, 24 (01) : 52 - 61
  • [6] Fang Yu, 2006, ACM/IEEE Symposium on Architectures for Networking and Communications Systems (ANCS 2006), P93, DOI 10.1109/ANCS.2006.4579527
  • [7] Enabling Personalized Search over Encrypted Outsourced Data with Efficiency Improvement
    Fu, Zhangjie
    Ren, Kui
    Shu, Jiangang
    Sun, Xingming
    Huang, Fengxiao
    [J]. IEEE TRANSACTIONS ON PARALLEL AND DISTRIBUTED SYSTEMS, 2016, 27 (09) : 2546 - 2559
  • [8] Structural Minimax Probability Machine
    Gu, Bin
    Sun, Xingming
    Sheng, Victor S.
    [J]. IEEE TRANSACTIONS ON NEURAL NETWORKS AND LEARNING SYSTEMS, 2017, 28 (07) : 1646 - 1656
  • [9] A Robust Regularization Path Algorithm for ν-Support Vector Classification
    Gu, Bin
    Sheng, Victor S.
    [J]. IEEE TRANSACTIONS ON NEURAL NETWORKS AND LEARNING SYSTEMS, 2017, 28 (05) : 1241 - 1248
  • [10] Incremental Support Vector Learning for Ordinal Regression
    Gu, Bin
    Sheng, Victor S.
    Tay, Keng Yeow
    Romano, Walter
    Li, Shuo
    [J]. IEEE TRANSACTIONS ON NEURAL NETWORKS AND LEARNING SYSTEMS, 2015, 26 (07) : 1403 - 1416