关键词: 正则表达式, 深度包检测, 并行线程, 扩展有限自动机, 网络安全

Abstract: An improved XFA for deep packet inspection is proposed. Firstly the branching transitions are augmented with the check instruction and the backward transitions are eliminated; then the parallel detection mechanism is used, the original thread is replaced by the two parallel threads which are in order to accelerate the speed of matching： the pre statistical thread and the state machine matching thread. The experiments show the algorithm has a faster speed and stability, and is suitable for multi-core computing environments.

Key words: regular expression, deep packet inspection, parallel threads, extended finite automata, network security