Extending finite automata to efficiently match perl-compatible regular expressions

Proceedings of 2008 ACM CoNEXT Conference - 4th International Conference on Emerging Networking EXperiments and Technologies, CoNEXT '08

Volumn , Issue , 2008, Pages

  Becchi, Michela ^a   Crowley, Patrick ^a  

^a WASHINGTON UNIVERSITY IN ST LOUIS   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

ALTERNATIVE APPROACH; BANDWIDTH REQUIREMENT; DETECTION SYSTEM; DETERMINISTIC FINITE AUTOMATA; EXPRESSIVE POWER; FINITE STATE MACHINES; HIGH MEMORY BANDWIDTH; HIGH-SPEED; INPUT STRING; MEMORY BANDWIDTHS; MEMORY SPACE; NETWORK INTRUSIONS; NETWORKING APPLICATIONS; NONDETERMINISTIC FINITE AUTOMATON; PRACTICAL IMPLEMENTATION; REAL-WORLD; REGULAR EXPRESSIONS; REGULAR-EXPRESSION MATCHING;

BANDWIDTH; FINITE AUTOMATA; INTERNET; INTRUSION DETECTION; NANOSTRUCTURED MATERIALS; OBJECT ORIENTED PROGRAMMING; TRANSLATION (LANGUAGES);

ROBOTS;

EID: 70350771139     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1544012.1544037     Document Type: Conference Paper

References (27)

1. A. V. Aho and M. J. Corasick, "Efficient String Matching: An Aid to Bibliographic Search," in Communications of the ACM, 1975.
2. J. E. Hopcroft and J. D. Ullman, "Introduction to Automata Theory, Languages, and Computation," Addison Wesley, 1979.
3. J. E. F. Friedl, "Mastering Regular Expressions," Third Edition, O'Reilly, August 2006
4. Perl Compatible Regular Expressions: http://www.pcre.org/
5. Ville Laurikari, "NFAs with Tagged Transitions, Their Conversion to Deterministic Automata and Application to Regular Expressions", in SPIRE 2000
6. M. Roesch, "Snort: Lightweight Intrusion Detection for Networks," in 13th System Administration Conf., Nov 1999.
7. Snort: http://www.Snort.org/
8. V. Paxson, "Bro: A System for Detecting Network Intruders in Real-Time", in Computer Networks, 31(23-24), Dec. 1999
9. ClamAV: http://www.clamav.net/
10. Cisco Security Appliance. http://www.cisco.com. 2007.
11. Citrix Application Firewall. http://www.citrix.com. 2007.
12. M. Altinel, M.J. Franklin, "Efficient Filtering of XML Documents for Selective Dissemination of Information", in Proc. VLDB Conference 2000.
13. R. Sommer and V. Paxson "Enhancing byte-level network intrusion detection signatures with context," in CCS 2003.
14. J. Newsome et al., "Polygraph: Automatic Signature Generation for Polymorphic Worms", in IEEE Security & Privacy Symp., 2005.
15. L. Tan, and T. Sherwood, "A High Throughput String Matching Architecture for Intrusion Detection and Prevention," in ISCA 2005.
16. F. Yu et al., "Fast and Memory-Efficient Regular Expression Matching for Deep Packet Inspection", in ANCS 2006
17. S. Kumar et al., "Algorithms to Accelerate Multiple Regular Expressions Matching for Deep Packet Inspection," in ACM SIGCOMM, Sept 2006.
18. S. Kumar et al., "Advanced Algorithms for Fast and Scalable Deep Packet Inspection", ANCS 2006
19. M. Becchi and P. Crowley, "An Improved Algorithm to Accelerate Regular Expression Evaluation", in ANCS 2007.
20. M. Becchi and P. Crowley, "A Hybrid Finite Automaton for Practical Deep Packet Inspection", in CoNEXT 2007.
21. S. Kumar et al. "Curing Regular Expressions Matching Algorithms from Insomnia, Amnesia, and Acalculia," in ANCS 2007.
22. R. Sidhu and V. K. Prasanna, "Fast Regular Expression Matching using FPGAs", in FCCM 2001
23. R. Franklin et al., "Assisting Network Intrusion Detection with Reconfigurable Hardware," FCCM 2002.
24. C. Clark et al., "Efficient reconfigurable logic circuit for matching complex network intrusion detection patterns," in FLP 2003
25. B. Brodie, et al., "A Scalable Architecture For High-Throughput Regular-Expression Pattern Matching," in ISCA 2006.
26. A. Mitra et al., "Compiling PCRE to FPGA for Accelerating SNORT IDS", in ANCS 2007
27. Becchi et al., "A workload for evaluating deep packet inspection architectures," in IISWC 2008