Computer Engineering and Applications ›› 2012, Vol. 48 ›› Issue (34): 245-248.

Previous Articles    

Improved XFA for deep packet inspection

WEI Dezhi, HONG Lianxi, LIN Lina, WU Xu   

  1. Chengyi College, Jimei University, Xiamen, Fujian 361021, China
  • Online:2012-12-01 Published:2012-11-30


魏德志,洪联系,林丽娜,吴  旭   

  1. 集美大学 诚毅学院,福建 厦门 361021

Abstract: An improved XFA for deep packet inspection is proposed. Firstly the branching transitions are augmented with the check instruction and the backward transitions are eliminated; then the parallel detection mechanism is used, the original thread is replaced by the two parallel threads which are in order to accelerate the speed of matching: the pre statistical thread and the state machine matching thread. The experiments show the algorithm has a faster speed and stability, and is suitable for multi-core computing environments.

Key words: regular expression, deep packet inspection, parallel threads, extended finite automata, network security

摘要: 提出了一种应用于深度包检测的改进XFA。该算法在XFA的分支迁移边上添加判断指令,消除XFA存在冗余迁移边的问题;采用并行检测机制,将匹配线程升级为两个并行的线程,预统计线程和状态机匹配线程,加快匹配速度。实验验证该算法有更快的运行速度和稳定性,适合多核计算环境。

关键词: 正则表达式, 深度包检测, 并行线程, 扩展有限自动机, 网络安全