摘要
高性能深度包检测系统使用确定型有穷自动机DFA(Deterministic Finite Automata)来执行数据包的检测过程.然而,DFA所带来的存储消耗问题使其难以适用于片内资源稀缺的FPGA.目前已存在多种算法着眼于解决DFA的空间爆炸问题,但是其在带来较好压缩率的同时,也在一定程度上影响到了系统的检测速度.本文提出了一种无匹配时间损耗的DFA压缩算法,并在此基础上,基于FPGA硬件平台,设计实现了单个DFA匹配引擎.实验测试结果表明,本文所设计的算法,在未影响整个系统匹配性能的前提下,可以实现10%~30%左右的压缩率.
Start-of-the-art deep packet inspection system uses deterministic finite automata(DFA)algorithms to perform regular expression matching.Nevertheless,the storage consumption problem caused by DFA make it difficult to apply to FPGA with scarce on-chip resources.At present,there are many algorithms aiming at solving the space explosion problem of DFA,but it affects the detection speed of the system to some extent while bringing better compression ratio.In this paper,a DFA compression algorithm without matching time loss is proposed.Based on the hardware platform of FPGA,a single DFA matching engine is designed and implemented.Experimental results show that the algorithm can achieve a compression rate of 10%to 30%without affecting the matching performance of the whole system.
作者
孙明乾
乔庐峰
陈庆华
SUN Ming-qian;QIAO Lu-feng;CHEN Qing-hua(Institute of Communication Engineering,Army Engineering University of PLA,Nanjing,Jiangsu 210000,China)
出处
《电子学报》
EI
CAS
CSCD
北大核心
2020年第6期1132-1139,共8页
Acta Electronica Sinica
