首页> 外文期刊>IEEE Transactions on Parallel and Distributed Systems >Picking Pesky Parameters: Optimizing Regular Expression Matching in Practice
【24h】

Picking Pesky Parameters: Optimizing Regular Expression Matching in Practice

机译:选择讨厌的参数:在实践中优化正则表达式匹配

获取原文
获取原文并翻译 | 示例

摘要

Network security systems inspect packet payloads for signatures of attacks. These systems use regular expression matching at their core. Many techniques for implementing regular expression matching at line rate have been proposed. Solutions differ in the type of automaton used (i.e., deterministic versus non-deterministic) and in the configuration of implementation-specific parameters. While each solution has been shown to perform well on specific rule sets and traffic patterns, there has been no systematic comparison across a large set of solutions, rule sets and traffic patterns. Thus, it is extremely challenging for a practitioner to make an informed decision within the plethora of existing algorithmic and architectural proposals. Moreover, as multi-core processors are becoming popular, many parameters need to be tuned to maximize the multi-core potential. To address this problem, we present a comprehensive evaluation of a broad set of regular expression matching techniques. We consider both algorithmic and architectural aspects. Specifically, we explore the performance, area requirements, and power consumption of implementations targeting multi-core processors and FPGAs using rule sets of practical size and complexity. We present detailed performance results and specific guidelines for determining optimal configurations based on a simple evaluation of the rule set. These guidelines can help significantlywhen implementing regular expression matching systems in practice.
机译:网络安全系统检查数据包有效载荷是否具有攻击特征。这些系统在其核心使用正则表达式匹配。已经提出了许多用于以线速实现正则表达式匹配的技术。解决方案在所使用的自动机类型(即确定性与非确定性)以及特定于实现的参数的配置方面有所不同。尽管每种解决方案在特定的规则集和流量模式上都表现出良好的性能,但是在众多解决方案,规则集和流量模式上却没有系统的比较。因此,对于从业者在众多现有算法和体系结构建议中做出明智的决定是极具挑战性的。此外,随着多核处理器的普及,需要调整许多参数以最大程度地发挥多核潜力。为了解决这个问题,我们提出了一套广泛的正则表达式匹配技术的综合评估。我们同时考虑算法和体系结构方面。具体来说,我们使用实际大小和复杂性的规则集来探索针对多核处理器和FPGA的实现的性能,面积要求和功耗。我们根据规则集的简单评估,提供详细的性能结果和用于确定最佳配置的特定指南。在实践中实施正则表达式匹配系统时,这些准则可以提供很大帮助。

著录项

相似文献

  • 外文文献
  • 中文文献
  • 专利
获取原文

客服邮箱:kefu@zhangqiaokeyan.com

京公网安备:11010802029741号 ICP备案号:京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有
  • 客服微信

  • 服务号