检索
E-mail
RSS
作者投稿和查稿 主编审稿 专家审稿 编委审稿 远程编辑

计算机工程 ›› 2010, Vol. 36 ›› Issue (3): 136-138.doi: 10.3969/j.issn.1000-3428.2010.03.045

• 安全技术 • 上一篇    下一篇

NIDS中正则表达式匹配电路的改进与优化

田 里   

  1. (天津大学电信学院微电子系，天津 300072)
  • 收稿日期:1900-01-01 修回日期:1900-01-01 出版日期:2010-02-05 发布日期:2010-02-05

Improvement and Optimization of Regular Expressions Matching Circuit in NIDS

TIAN Li   

  1. (Microelectronics Department, School of Electronic Information Engineering, Tianjin University, Tianjin 300072)
  • Received:1900-01-01 Revised:1900-01-01 Online:2010-02-05 Published:2010-02-05

PDF

931

被引次数

1 | 1

摘要： 对网络入侵检测系统(NIDS)中复杂正则表达式匹配电路进行改进和优化。为达到最大吞吐量和最小的单位字符占用资源量，设计利用预译码、前缀树、规则分组、并行处理等方法进行结构优化。实验结果表明，改进后的电路结构提高了约47%匹配速度，缩减了约39%的电路面积，具有较低的资源占用和更广泛的适用性。

关键词: 网络入侵检测系统, 正则表达式, 预译码, 前缀树, 规则分组, 并行处理

Abstract: An improved and optimized circuit structure corresponds to the complex regular expressions pattern matching of Network Intrusion Detection System(NIDS) is introduced. In order to achieve maximum throughput and minimum resources per character, the pre-decode, prefix tree, pattern partitioning and parallel processing methods are designed and tested. Experimental results prove that the circuit introduced by this paper improves the frequency by 47% and decreases the area by 39%, which has a lower cost and wider applicability.

Key words: Network Intrusion Detection System(NIDS), regular expressions, pre-decode, prefix tree, pattern partitioning, parallel processing

中图分类号: