A hybrid finite automaton for practical deep packet inspection

Proceedings of 2007 ACM CoNEXT Conference - 3rd International Conference on Emerging Networking EXperiments and Technologies, CoNEXT

Volumn , Issue , 2007, Pages

  Becchi, Michela ^a   Crowley, Patrick ^a  

^a WASHINGTON UNIVERSITY IN ST LOUIS   (United States)

Author keywords

Deep packet inspection; DFA; NFA; Regular expressions

Indexed keywords

COMPLEX TERMS; DEEP PACKET INSPECTION; DETERMINISTIC FINITE AUTOMATONS; DFA; EXPONENTIAL INCREASES; HYBRID AUTOMATONS; LINEAR TIMES; MEMORY REQUIREMENTS; NFA; REAL TRAFFICS; REGULAR EXPRESSIONS; WORST CASES;

FINITE AUTOMATA; INSPECTION; NANOSTRUCTURED MATERIALS; PACKET NETWORKS; PIPELINE PROCESSING SYSTEMS; ROBOTS; TRANSLATION (LANGUAGES);

AUTOMATA THEORY;

EID: 56749186238     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1364654.1364656     Document Type: Conference Paper

References (26)

1. A. V. Aho and M. J. Corasick, "Efficient String Matching: An Aid to Bibliographic Search," Communications of the ACM, pp. 333-340, 1975.
2. B. Commentz-Walter, "A string matching algorithm fast on the average," in ICALP, July 1979.
3. S. Wu, U. Manber, "A fast algorithm for multi-pattern searching," Tech. Report TR-94-17, Univ of Arizona, 1994.
4. J. E. Hopcroft and J. D. Ullman, "Introduction to Automata Theory, Languages, and Computation," Addison Wesley, 1979.
5. J. Hopcroft, "An nlogn algorithm for minimizing states in a finite automaton," in Theory of Machines and Computation, J. Kohavi, Ed. New York: Academic, 1971, pp. 189-196.
6. M. Roesch, "Snort: Lightweight Intrusion Detection for Networks," in System Administration Conf., 1999
7. Snort: http://www.Snort.org/
8. Cisco Systems. Cisco ASA 5505 Adaptive Security Appliance. http://www.cisco.com. 2007.
9. Citrix Systems. Citrix Application Firewall. http://www.citrix.com. 2007.
10. Bro: http://bro-ids.org/
11. Vem Paxson et al., "Flex: A fast scanner generator," http://www.gnu.org/software/flex/
12. R. Sommer and V. Paxson, "Enhancing byte-level network intrusion detection signatures with context.", in CCS 2003.
13. N. Tuck, T. Sherwood, B. Calder, and G. Varghese, "Deterministic memory-efficient string matching algorithms for intrusion detection," in Infocom 2004.
14. L. Tan, and T. Sherwood, "A High Throughput String Matching Architecture for Intrusion Detection and Prevention," ISCA 2005.
15. F. Yu, Z. Chen, Y. Diao, T. V. Lakshman, and R. H. Katz, "Fast and Memory-Efficient Regular Expression Matching for Deep Packet Inspection", in ANCS 2006
16. S. Kumar et alt., "Algorithms to Accelerate Multiple Regular Expressions Matching for Deep Packet Inspection," in ACM SIGCOMM, Sept 2006.
17. S. Kumar, et alt, "Advanced Algorithms for Fast and Scalable Deep Packet Inspection", in ANCS 2006
18. M. Becchi and S. Cadambi, "Memory-Efficient Regular Expression Search Using State Merging", in INFOCOM 2007
19. M. Becchi and P. Crowley, "An Improved Algorithm to Accelerate Regular Expression Evaluation", in ANCS 2007
20. M. Becchi and P. Crowley, "Addressing complex regular expressions through counting automata", Washington University Tech. Report, July 2007.
21. R. W. Floyd, and J. D. Ullman, "The Compilation of Regular Expressions into Integrated Circuits", Journal of ACM, vol. 29, no. 3, pp. 603-622, July 1982.
22. R. Sidhu and V. K. Prasanna, "Fast Regular Expression Matching using FPGAs", in FCCM 2001
23. C. R. Clark and D. E. Schimmel, "Efficient reconfigurable logic circuit for matching complex network intrusion detection patterns," in FLP 2003.
24. J. Moscola et alt., "Implementation of a content-scanning module for an internet firewall," in FCCM, USA, April 2003.
25. Internet traffic traces: http://cctf.slmoo.com/
26. Cu-11 standard cell/gate array ASIC, IBM. www.ibm.com