본문 바로가기
  • Home

A Hardware Architecture of Regular Expression Pattern Matching for Deep Packet Inspection

  • Journal of The Korea Society of Computer and Information
  • Abbr : JKSCI
  • 2011, 16(5), pp.13-22
  • Publisher : The Korean Society Of Computer And Information
  • Research Area : Engineering > Computer Science

윤상균 1 이규희 ORD ID 1

1연세대학교

Accredited

ABSTRACT

Network Intrusion Detection Systems use regular expression to represent malicious packets and hardware-based pattern matching is required for fast deep packet inspection. Although hardware architectures for implementing constraint repetition operators such as {10} were recently proposed, they have some limitation. In this paper, we propose hardware architecture supporting constraint repetitions of general regular expression sub-patterns with lower logic complexity. The subpatterns supported by the proposed contraint repetition architecture include general regular expression patterns as well as a single character and fixed length patterns. With the proposed building block, we can implement more efficiently regular expression pattern matching hardwares.

Citation status

* References for papers published after 2023 are currently being built.

This paper was written with support from the National Research Foundation of Korea.