Improved XFA for deep packet inspection

Abstract

Abstract: An improved XFA for deep packet inspection is proposed. Firstly the branching transitions are augmented with the check instruction and the backward transitions are eliminated; then the parallel detection mechanism is used, the original thread is replaced by the two parallel threads which are in order to accelerate the speed of matching： the pre statistical thread and the state machine matching thread. The experiments show the algorithm has a faster speed and stability, and is suitable for multi-core computing environments.

Key words: regular expression, deep packet inspection, parallel threads, extended finite automata, network security

摘要： 提出了一种应用于深度包检测的改进XFA。该算法在XFA的分支迁移边上添加判断指令，消除XFA存在冗余迁移边的问题；采用并行检测机制，将匹配线程升级为两个并行的线程，预统计线程和状态机匹配线程，加快匹配速度。实验验证该算法有更快的运行速度和稳定性，适合多核计算环境。

关键词: 正则表达式, 深度包检测, 并行线程, 扩展有限自动机, 网络安全

WEI Dezhi, HONG Lianxi, LIN Lina, WU Xu. Improved XFA for deep packet inspection[J]. Computer Engineering and Applications, 2012, 48(34): 245-248.

魏德志，洪联系，林丽娜，吴旭. 一种改进的XFA在深度包检测中的应用[J]. 计算机工程与应用, 2012, 48(34): 245-248.

[1]	LIU Mingjie, LIANG Yi, AI Zhongliang, JIA Gaofeng. Research on Chinese Text Proofreading Method for Legal Documents [J]. Computer Engineering and Applications, 2020, 56(24): 274-278.
[2]	PENG Chunyan, DU Xiujuan. Secure Routing Protocol Based on Depth in Underwater Acoustic Sensor Networks [J]. Computer Engineering and Applications, 2020, 56(2): 76-81.
[3]	GOU Jijun, LI Junhua, CHEN Chen, CHEN Yiming, LV Yida. Network Intrusion Detection Method Based on Random Forest [J]. Computer Engineering and Applications, 2020, 56(2): 82-88.
[4]	ZHOU Long, WANG Chen, SHI Yin. Research of Webshell Detection Based on RNN [J]. Computer Engineering and Applications, 2020, 56(14): 88-92.
[5]	WU Depeng, LIU Yi. Intrusion Detection Model Based on Self-Organizing Map of Variable Network Structure [J]. Computer Engineering and Applications, 2020, 56(12): 81-86.
[6]	SHI Leyi, LIU Jia, LIU Yihao, ZHU Hongqiang, DUAN Pengfei. Survey of Research on Network Security Situation Awareness [J]. Computer Engineering and Applications, 2019, 55(24): 1-9.
[7]	ZHANG Shujuan1, ZHANG Juan2. Dynamical Modeling and Analysis of Passive Worms Propagation in P2P Networks [J]. Computer Engineering and Applications, 2019, 55(11): 60-66.
[8]	MA Zhanfei1, YANG Jin2, JIN Yi2, BIAN Qi3. Network Intrusion Detection Method Based on IQPSO-IDE Algorithm [J]. Computer Engineering and Applications, 2019, 55(10): 115-120.
[9]	FU Zhe1，2, LI Jun2. Survey on high performance regular expression matching algorithms [J]. Computer Engineering and Applications, 2018, 54(20): 1-13.
[10]	FENG Bo1, GUO Fan2, TAN Suwen3. Attack source traceback scheme based on probabilistic packet marking for IPv6 network [J]. Computer Engineering and Applications, 2016, 52(6): 102-106.
[11]	WU Luqing, WANG Ze. Security design based on location key for mobile Ad-Hoc networks [J]. Computer Engineering and Applications, 2016, 52(16): 132-136.
[12]	CHEN Hong1, WANG Fei1, XIAO Zhenjiu1，2, SUN Lina1. Network security situation assessment model fusing multi-source data [J]. Computer Engineering and Applications, 2015, 51(17): 96-101.
[13]	CHEN Hong1, WANG Fei1, XIAO Zhenjiu1，2, SUN Lina1. Method of network security situation prediction based on IHS_LSSVR [J]. Computer Engineering and Applications, 2014, 50(23): 91-94.
[14]	CHENG Ke, SONG Haisheng, AN Zhanfu, KONG Yongsheng. Method for evaluation of network security risk based on t-SVR with parameters optimization by GA [J]. Computer Engineering and Applications, 2014, 50(12): 91-95.
[15]	ZHU Lin, ZHU Canshi. Data stream sliding window clustering algorithm applied in IDS [J]. Computer Engineering and Applications, 2014, 50(1): 87-90.

Improved XFA for deep packet inspection

一种改进的XFA在深度包检测中的应用

PDF

Knowledge

Abstract

Cite this article

share this article

References

Related Articles 15

Recommended Articles

Metrics