Fast and memory-efficient regular expression matching using transition sharing

IEICE Transactions on Information and Systems

Volumn E92-D, Issue 10, 2009, Pages 1953-1960

  Zhang, Shuzhuang ^a   Luo, Hao ^b   Fang, Binxing ^a   Yun, Xiaochun ^b  

^a HARBIN INSTITUTE OF TECHNOLOGY   (China)

^b INSTITUTE OF COMPUTING TECHNOLOGY   (China)

Author keywords

Deep packet inspection; Memory reduction; Regular expression; Transition sharing

Indexed keywords

ECONOMIC AND SOCIAL EFFECTS; PATTERN MATCHING;

APPLICATION SPECIFIC; DEEP PACKET INSPECTION; DETERMINISTIC FINITE AUTOMATON; MEMORY REDUCTION; MEMORY REQUIREMENTS; REGULAR EXPRESSIONS; REGULAR-EXPRESSION MATCHING; TRANSITION SHARING;

NETWORK SECURITY;

EID: 77950215198     PISSN: 09168532     EISSN: 17451361     Source Type: Journal    
DOI: 10.1587/transinf.E92.D.1953     Document Type: Article

References (14)

1. J. Levandoski, E. Sommer, and M. Strait, "Application layer packet classifier for Linux," http://l7-filter.sourceforge.net/
2. SNORT network intrusion detection system," http://www.snort.org
3. Bro intrusion detection system,"http://bro-ids.org/Overview.html
4. J.E. Hopcroft, R. Motwani, and J.D. Ullman, Automata Theory, Languages and Compilation, 3rd ed., Addison Wesley, 2004.
5. J. Hopcroft, "An nlogn algorithm for minimizing states in a finite automaton," in Theory of Machines and Computation, ed. J. Kohavi, pp.189-196, Academic, New York, 1971.
6. F. Yu, Z. Chen, Y. Diao, T.V. Lakshman, and R.H. Katz, "Fast and memory-efficient regular expression matching for deep packet inspection," IEEE/ACM ANCS, pp.93-102, Dec. 2006.
7. S. Kumar, S. Dharmapurikar, F. Yu, P. Crowley, and J. Turner, "Algorithms to accelerate multiple regular expressions matching for deep packet inspection," ACM SIGCOMM, pp.339-350, Sept. 2006.
8. S. Kumar, J. Turner, and J. Williams, "Advanced algorithms for fast and scalable deep packet inspection," IEEE/ACM ANCS, pp.81-92, Dec. 2006.
9. M. Becchi and S. Cadambi, "An improved algorithm to accelerate regular expression evaluation," IEEE/ACM ANCS, pp.145-154, Dec. 2007.
10. M. Becchi and S. Cadambi, "Memory-efficient regular expression search using state merging," IEEE Infocom, pp.1064-1072, 2007.
11. F. Baboescu and G. Varghese, "Scalable packet classification," IEEE/ACM Trans. Netw., vol.13, no.1, pp.2-14, Feb. 2005.
12. N. Tuck, T. Sherwood, B. Calder, and G. Varghese, "Deterministic memory-efficient string matching algorithms for intrusion detection," IEEE Infocom, pp.333-340, March 2004.
13. http://regex.wustl.edu/files/regex 1.2.tar
14. MIT DARPA Intrusion Detection Data Sets, http://www.ll.mit.edu/ mission/communications/ist/corpora/ideval/data/1999/testing/ week4/thursday/outside.tcpdump.gz l, 1999.