Methodology for Fast Pattern Matching by Deterministic Finite Automaton with Perfect Hashing

Methodology for Fast Pattern Matching by Deterministic Finite Automaton with Perfect Hashing

article in a collection out of WoS and Scopus

Czech

As the speed of current computer networks increases, it is necessary to protect networks by security systems such as firewalls and Intrusion Detection Systems operating at multigigabit speeds. Pattern matching is the time-critical operation of current IDS on multigigabit networks. Regular expressions are often used to describe malicious network patterns. This paper deals with fast regular expression matching using the Deterministic Finite Automaton (DFA) with perfect hash function. We introduce decomposition of the problem on two parts: transformation of the input alphabet and usage of a fast DFA, and usage of perfect hashing to reduce space/speed tradeoff for DFA transition table

As the speed of current computer networks increases, it is necessary to protect networks by security systems such as firewalls and Intrusion Detection Systems operating at multigigabit speeds. Pattern matching is the time-critical operation of current IDS on multigigabit networks. Regular expressions are often used to describe malicious network patterns. This paper deals with fast regular expression matching using the Deterministic Finite Automaton (DFA) with perfect hash function. We introduce decomposition of the problem on two parts: transformation of the input alphabet and usage of a fast DFA, and usage of perfect hashing to reduce space/speed tradeoff for DFA transition table

Intrusion detection, regular expression, perfect hashing, hardware acceleration

KAŠTIL, J.; KOŘENEK, J.; LENGÁL, O.

2009

5. 5. 2009

IEEE Computer Society

Patras

978-0-7695-3782-5

12th EUROMICRO Conference on Digital System Design DSD 2009

823

289

6

https://www.fit.vut.cz/research/publication/9054/

3782a823.pdf