期刊文献+
任意字段
题名或关键词
题名
关键词
文摘
作者
第一作者
机构
刊名
分类号
参考文献
作者简介
基金资助
栏目信息

深度报文检测中基于GPU的正则表达式匹配引擎 被引量：10

GPU-based regular expression match engine for deep packet inspection
下载PDF
导出
摘要 提出了一种基于GPU的正则表达式匹配引擎来加速深度报文检测中的模式匹配过程。该引擎基于DFA模型,在匹配时每一个GPU线程处理一个报文,通过大量的并行线程来提高引擎的吞吐量。基于NVIDIA GeForce 9800GT GPU的实验表明,该引擎处理实际网络报文时的吞吐量达到了7.91 Gbps。 This paper proposed a GPU-based regular expression match engine for deep packet inspection,which modeled as deterministic finite automaton （DFA） and assigned a single packet to each GPU match thread.Finally,experiments on NVIDIA GeForce 9800GT GPU achieved a maximum traffic processing throughput of 7.91 Gbps using real network traces.
作者 王磊 陈曙晖 苏金树 许孟晋
机构地区 国防科学技术大学计算机学院
出处 《计算机应用研究》 CSCD 北大核心 2010年第11期4324-4327,共4页 Application Research of Computers
基金 国家"863"计划资助项目(2009AA01A346)
关键词 深度报文检测 模式匹配 正则表达式 图形处理单元 deep packet inspection（DPI） pattern matching regular expression GPU
分类号 TP393.08 [自动化与计算机技术—计算机应用技术]
  • 相关文献

参考文献21

  • 1Regular expression processor [ EB/OL ]. http ://www. titanicsystems. com/pdf/products/1. pdf.
  • 2BRODIE B C, TAYLOR D E, CYTRON R K. A scalable architecture for high-throughput regular-expression pattern matching [ J ]. SIGARCH Comput Archit News ,2006,34 ( 2 ) : 191 - 202.
  • 3SIDHU R, PRASANNA V K. Fast regular expression matching using FPGAs[ C ]//Proc of the 9th Annual IEEE Symposium on FCCM. Washington DC : IEEE Computer Society,2001:227- 238.
  • 4孙志刚,张子文.正则表达式匹配的高效硬件实现[J].计算机工程与科学,2009,31(10):5-7. 被引量：7
  • 5YU Fang, KATZ R H, LAKSHMAN T V. Gigabit rate packet pattern-matching using TCAM [ C ]//Proc of the 12th IEEE International Conference on Network Protocols. Washington DC : IEEE Computer Society,2004 : 174 - 183.
  • 6YU Jian-ming, LI Jun. A parallel NIDS pattern matching engine and its implementation on network processor [ C ]//Proc of International Conference on Security and Management. Las Vegas: CSREA Press, 2005:375-381.
  • 7LIU R Tong-tai, HUANG Nen-fu, KAO C N, et al. A fast patternmatch engine for network processor-based network intrusion detection system [ C ]//Proc of International Conference on Information Technology: Coding and Computing. Washington DC:IEEE Computer Society,2004:97-101.
  • 8CUDA programming guide [ EB/OL]. http://www, serc. iisc. ernet. in/ComputingFacilities/systems/Tesla _ Doc/NVIDIA _ CUDA _ Programming_Guide_2.3.pdf.
  • 9SMITH R, GOYAL N, ORMONTT J, et al. Evaluating GPUs for network packet signature matching[ C ]//Proc of International Symposium on Performance Analysis of Systems and Software. 2009.
  • 10SMITH R, ESTAN C, JHA S. XFA: faster signature matching with extended automata [ C ]//Proc of IEEE Symposium on Security and Privacy. Los Alamitos : IEEE Computer Society,2008 : 187- 201.

二级参考文献10

  • 1SNORT Network Intrusion Detection System[EB/OL]. [2007-05-18]. http://www.snort. org.
  • 2Bro Intrusion Detection System[EB/OL]. [2007-03-15]. http://www. bro-ids.org.
  • 3Application Layer Packet Classifier for Linux[EB/OL]. [2007-05-06]. http://17-filter. sourceforge. net.
  • 4Sidhu R, Prasanna V K. Fast Regular Expression Matching using FPGAs[C]//Proc of the 9th Annual IEEE Syrup on FCCM, 2001: 227-238.
  • 5Sutton P, Partial Character Decoding for Improved Regular Expression Matching in FPGAs[C]// Proc of IEEE Int' l Conf on Field-Programmable Technology, 2004: 25-32.
  • 6Katashita T. Highly Efficient String Matching Circuit for IDS with FPGA[C]//Proc of the 14th Annual IEEE Symp on FCCM, 2006 : 285-286.
  • 7Kumar S, Dharmapurikar S, Fang Yu, Algorithms to Accelerate Multiple Regular Expressions Matching for Deep Packet Inspection[C]//Proc of SIGCOMM'06,2006 : 11-15.
  • 8Kumar S, Turner J, Williams J. Advanced Algorithms for Fast and Sealable Deep Packet Inspection [ C]//Proc of ANCS'06,2006 : 81-92.
  • 9Brodie B C, Taylor D E, Cytron R K. A Scalable Architecture for High Throughput Regular Expression Pattern Matching[J]. ACM SIGARCH Computer Architecture News, 2006,34(2) : 191-202.
  • 10Hopcroft J E,Ullman J D. Introduction to Automata Theory,Languages, and Computation[M]. Second Edition. Bos ton: Addison Wesley, 2002.

共引文献6

同被引文献82

  • 1杨毅夫,刘燕兵,刘萍,郭牧怡,郭莉.正则表达式的DFA压缩算法[J].通信学报,2009,30(S1):36-42. 被引量：6
  • 2王佰玲,方滨兴,云晓春.零拷贝报文捕获平台的研究与实现[J].计算机学报,2005,28(1):46-52. 被引量：67
  • 3陈琼,苏文健.基于网页结构树的Web信息抽取方法[J].计算机工程,2005,31(20):54-55. 被引量：24
  • 4张庆丹,戴正华,冯圣中,孙凝晖.基于GPU的串匹配算法研究[J].计算机应用,2006,26(7):1735-1737. 被引量：15
  • 5李伟男,鄂跃鹏,葛敬国,钱华林.多模式匹配算法及硬件实现[J].软件学报,2006,17(12):2403-2415. 被引量：42
  • 6GARCIA L M. Programming with Libpcap : Sniflqng the network fromour own application[ EB/OL]. [ 2011 -06 -15]. http://undergraduate. csse. uwa. edu. au/units/CITS3231/reading/libpeap-programming. pdf.
  • 7DERI L, SUIN S. Ntop: Beyond ping and traceroute[ J]. Computer Science, 1999, 1700/1999(71) : 271-284.
  • 8LAMP1NG U. Wireshark user's guide[ EB/OL]. [2011 -08 -01]. http://www, wireshark, org/docs/wsug_html_chunked/.
  • 9OETIKEB. T. MRTG: The multi router traffic grapher[ EB/OL]. [ 2011-08-01 ]. http://www, usenix, org/event/lisa98/full_papers/oetiker/oetiker, pdf.
  • 10SHIVAKUMAR P, JOUPP1 N P. CACTI 3.0: An integrated cache timing, power, and area model [ EB/OL]. [ 2011-08-01 ]. http://www, cs. utexas, edu/uscrs/cart/publications/cacti3, pdf.

引证文献10

二级引证文献17

计算机应用研究
2010年 第11期

相关作者

内容加载中请稍等...

相关机构

内容加载中请稍等...

相关主题

内容加载中请稍等...

浏览历史

内容加载中请稍等...
;
使用帮助 返回顶部