| 一种用于深度报文检测的DFA状态表压缩方法 |
| |
| 引用本文： | 刘俊超,赵国鸿,陈曙晖. 一种用于深度报文检测的DFA状态表压缩方法[J]. 计算机工程与应用, 2008, 44(22): 74-76. DOI: 10.3778/j.issn.1002-8331.2008.22.022 |
| |
| 作者姓名： | 刘俊超 赵国鸿 陈曙晖 |
| |
| 作者单位： | 国防科学技术大学,计算机学院,长沙,410073;国防科学技术大学,计算机学院,长沙,410073;国防科学技术大学,计算机学院,长沙,410073 |
| |
| 摘 要： | 基于正则表达式进行深度报文检测在IDS/IPS、应用层协议识别等网络应用中具有重要作用。然而，采用DFA实现正则表达式需要大量的存储空间，限制了它的实际应用。将DFA状态转换表拆分成3个表，使用run-length编码进行压缩，并对压缩方法进行了优化。采用l7-filter中几个常用应用程序的正则表达式进行测试，结果表明该方法压缩效果一般在90%以上。
|
| 关 键 词： | 正则表达式 深度报文检测 确定有限自动机 状态转换表压缩 |
| 收稿时间： | 2008-01-10 |
| 修稿时间： | 2008-3-31 |
Method to compress DFA transition table for deep packet inspection |
| |
| LIU Jun-chao,ZHAO Guo-hong,CHEN Shu-hui. Method to compress DFA transition table for deep packet inspection[J]. Computer Engineering and Applications, 2008, 44(22): 74-76. DOI: 10.3778/j.issn.1002-8331.2008.22.022 |
| |
| Authors: | LIU Jun-chao ZHAO Guo-hong CHEN Shu-hui |
| |
| Affiliation: | School of Computer Science，National University of Defense Technology，Changsha 410073，China |
| |
| Abstract: | Deep packet inspection based on regular expressions has become extremely important due to its applications in IDS/IPS,application protocol recognition,etc.However,DFA transition table of regular expressions require large amounts of memory,and this limits its practical application.This paper splits the DFA transition table into three tables,compresses the tables using run-length coding,and some optimizations are introduced.The test result using some normal applications in l7-filter indicates that the method has more than 90% compressing rate. |
| |
| Keywords: | regular expression deep packet inspection DFA transition table compressing |
| 本文献已被 CNKI 万方数据 等数据库收录！ |
| 点击此处可从《计算机工程与应用》浏览原始摘要信息 |
|
点击此处可从《计算机工程与应用》下载全文 |
|
