| 支持多正则表达式匹配的硬件结构 |
| |
| 引用本文： | 张伟,薛一波,嵩天.支持多正则表达式匹配的硬件结构[J].清华大学学报(自然科学版),2009(10). |
| |
| 作者姓名： | 张伟 薛一波 嵩天 |
| |
| 作者单位： | 清华大学计算机科学与技术系;清华大学网络安全研究中心;北京理工大学计算机系; |
| |
| 基金项目： | 国家“八六三”高技术项目(2007AA01Z468) |
| |
| 摘 要： | 针对多正则表达式匹配已经成为制约网络安全系统性能瓶颈的问题,提出一种硬件四级流水线的多正则表达式匹配结构。该结构对多条正则表达式统一处理,将正则表达式切割成字符串和循环控制,采用字符串匹配结构处理字符串,并设计专用硬件电路处理循环限制。实验表明,该硬件结构在Virtex2和Virtex4 FPGA上分别可以达到1.9和2.1Gb/s的匹配性能,与国外相关研究成果相比,消耗更少的存储空间,并支持更多的正则表达式。
|
| 关 键 词： | 网络安全 系统结构 特征匹配 正则表达式匹配 |
Multiple regular expression matching hardware architecture |
| |
| ZHANG Wei,XUE Yibo,SONG Tian.Multiple regular expression matching hardware architecture[J].Journal of Tsinghua University(Science and Technology),2009(10). |
| |
| Authors: | ZHANG Wei XUE Yibo SONG Tian |
| |
| Institution: | 1.Department of Computer Science and Technology;Tsinghua University;Beijing 100084;China;2.Research Institute of Information Technology;3.School of Computer Science;Beijing Institute of Technology;Beijing 100081;China |
| |
| Abstract: | Multiple regular expression matching has become one of the most important performance bottlenecks in network security applications.The paper presents a hardware-based multiple regular expressions matching architecture with a four-stage pipeline.The architecture simultaneously matches multiple regular expressions.The algorithm splits the regular expressions into strings and constrained repetitions and then utilizes a string matching architecture for the strings and a hardware circuit for the constrained repe... |
| |
| Keywords: | network security architecture pattern matching regular expression matching |
| 本文献已被 CNKI 等数据库收录！ |
