.png){kind=icon}
返回
Fast Regular Expression Matching Using Small TCAM
.png){kind=icon}
OA
AI
DOI：10.1109/TNET.2013.2256466.png)
.png){kind=icon}
原文求助.png){kind=icon}
分享.png){kind=icon}
收藏
摘要
En 中文
Regular expression (RE) matching is a core component of deep packet inspection in modern networking and security devices. In this paper, we propose the first hardware-based RE matching approach that uses ternary content addressable memory (TCAM), which is available as off-the-shelf chips and has been widely deployed in modern networking devices for tasks such as packet classification. We propose three novel techniques to reduce TCAM space and improve RE matching speed: transition sharing, table consolidation, and variable striding. We tested our techniques on eight real-world RE sets, and our results show that small TCAMs can be used to store large deterministic finite automata (DFAs) and achieve potentially high RE matching throughput. For space, we can store each of the corresponding eight DFAs with 25 000 states in a 0.59-Mb TCAM chip. Using a different TCAM encoding scheme that facilitates processing multiple characters per transition, we can achieve potential RE matching throughput of 10-19 Gb/s for each of the eight DFAs using only a single 2.36-Mb TCAM chip.
Keyword:
Deep packet inspection
information security
intrusion detection
regular expression matching
security
ternary content addressable memory (TCAM)
期刊
I
IF:
3.6
论文数:
4.4K
被引数:
9.5K
机构
引用论文
A Facile Synthesis of N-Alkoxycarbonyl Aziridines from Olefins Bearing Two Geminal Electron-Withdrawing Groups.png)
Synthesis
SynthesisIF0
PREAI
分享收藏分享收藏
查看更多内容