Chain-based DFA deflation for fast and scalable regular expression matching using TCAM

Proceedings - 2011 7th ACM/IEEE Symposium on Architectures for Networking and Communications Systems, ANCS 2011

Volumn , Issue , 2011, Pages 24-35

  Peng, Kunyang ^a   Tang, Siyuan ^a   Chen, Min ^a   Dong, Qunfeng ^a  

^a UNIVERSITY OF SCIENCE AND TECHNOLOGY OF CHINA   (China)

Author keywords

Deep Packet Inspection; DFA; Regular Expression Matching; TCAM

Indexed keywords

CORE ENGINES; DEEP PACKET INSPECTION; DFA; IMPLEMENTATION METHODS; INTENSIVE RESEARCH; LOOKUPS; MATCHING SPEED; NETWORK FUNCTIONS; ORDERS OF MAGNITUDE; PATTERN SET; PROTOCOL ANALYSIS; REGULAR EXPRESSIONS; REGULAR-EXPRESSION MATCHING; STORAGE SPACES; TCAM;

INTRUSION DETECTION;

NETWORK ARCHITECTURE;

EID: 81255150592     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ANCS.2011.13     Document Type: Conference Paper

References (21)

1. Regular Expression Processor. http://regex.wustl.edu/.
2. Snort intrusion detection system. http://www.snort.net/.
3. B. Agrawal and T. Sherwood. Modeling TCAM power for next generation network devices. In Proceedings of International Symposium on Performance Analysis of Systems and Software (ISPASS), 2006.
4. M. Alicherry, M. Muthuprasanna, and V. Kumar. High speed pattern matching for network IDS/IPS. In Proceedings of IEEE ICNP, 2006.
5. M. Becchi and P. Crowley. A hybrid finite automaton for practical deep packet inspection. In Proceedings of CoNext, 2007.
6. M. Becchi and P. Crowley. An improved algorithm to accelerate regular expression evaluation. In Proceedings of ANCS, 2007.
7. M. Becchi and P. Crowley. Efficient regular expression evaluation: Theory to practice. In Proceedings of ANCS, 2008.
8. M. Becchi and P. Crowley. Extending finite automata to efficient match perl-compatible regular expressions. In Proceedings of CoNext, 2008.
9. M. Chen. TCAM-based high speed regular expression matching. Bachelor thesis, Institute of Networked Systems (IONS), University of Science and Technology of China, June 2010.
10. M. Chen, Q. Dong, and K. Peng. TCAM-based DFA implementation: A novel approach to efficient regular expression matching. Technical report, Institute of Networked Systems (IONS), University of Science and Technology of China.
11. J. E. Hopcroft, R. Motwani, and J. D. Ullman. Introduction to Automata Theory, Languages, and Computation (3rd Edition). Addison Wesley, 2006.
12. S. Kumar, B. Chandrasekaran, J. Turner, and G. Varghese. Curing regular expressions matching algorithms from insomnia, amnesia, and acalculia. In Proceedings of ANCS, 2007.
13. S. Kumar, S. Dharmapurikar, F. Yu, P. Crowley, and J. Turner. Algorithms to accelerate multiple regular expressions matching for deep packet inspection. In Proceedings of ACM SIGCOMM, 2006.
14. C. R. Meiners, A. X. Liu, and E. Torng. Bit Weaving: A non-prefix approach to compressing packet classifiers in TCAMs. In Proceedings of IEEE ICNP, 2009.
15. C. R. Meiners, J. Patel, E. Norige, E. Torng, and A. X. Liu. Fast regular expression matching using small TCAMs for network intrusion detection and prevention systems. In Proceedings of USENIX Security, August 2010.
16. K. Peng, Q. Dong, and M. Chen. TCAM-based DFA deflation: A novel approach to fast and scalable regular expression matching. In Proceedings of ACM/IEEE IWQoS, 2011.
17. R. Smith, C. Estan, and S. Jha. XFA: Faster signature matching with extended automata. In Proceedings of IEEE Symposium on Security and Privacy, 2008.
18. R. Smith, C. Estan, S. Jha, and S. Kong. Deflating the big bang: fast and scalable deep packet inspection with extended finite automata. In Proceedings of ACM SIGCOMM, 2008.
19. J. S. Sung, S. M. Kang, Y. Lee, T. G. Kwon, and B. T. Kim. A multi-gigabit rate deep packet inspection algorithm using TCAM. In Proceedings of IEEE GLOBECOM, 2005.
20. F. Yu, Z. Chen, Y. Diao, T. V. Lakshman, and R. H. Katz. Fast and memory-efficient regular expression matching for deep packet inspection. In Proceedings of ANCS, 2006.
21. F. Yu, R. H. Katz, and T. V. Lakshman. Gigabit rate packet pattern-matching using TCAM. In Proceedings of IEEE ICNP, 2004.