摘要
对网络入侵检测系统(NIDS)中复杂正则表达式匹配电路进行改进和优化。为达到最大吞吐量和最小的单位字符占用资源量,设计利用预译码、前缀树、规则分组、并行处理等方法进行结构优化。实验结果表明,改进后的电路结构提高了约47%匹配速度,缩减了约39%的电路面积,具有较低的资源占用和更广泛的适用性。
An improved and optimized circuit structure corresponds to the complex regular expressions pattern matching of Network Intrusion Detection System（NIDS） is introduced. In order to achieve maximum throughput and minimum resources per character, the pre-decode, prefix tree, pattern partitioning and parallel processing methods are designed and tested. Experimental results prove that the circuit introduced by this paper improves the frequency by 47% and decreases the area by 39%, which has a lower cost and wider applicability.
出处
《计算机工程》
CAS
CSCD
北大核心
2010年第3期136-138,共3页
Computer Engineering
关键词
网络入侵检测系统
正则表达式
预译码
前缀树
规则分组
并行处理
Network Intrusion Detection System（NIDS）
regular expressions
pre-decode
prefix tree
pattern partitioning
parallel processing
