A Predict Deterministic Finite Automaton for Practical Deep Packet Inspection
Qiang Wei, Yunzhao Li, Yanjie Chu
Abstract
Open-access reader
Qiang Wei, Yunzhao Li, Yanjie Chu
Abstract
Open-access reader
Deep packet inspection has become extremely important due to network security. In deep packet inspection, the packet payload is compared against a set of patterns specified as regular expressions. Regular expressions are often implemented as deterministic finite automaton (DFA) for matching in linear time at high network link rates. We proposed a predict DFA which can accelerate the processing speed of DFA. A predict DFA uses additional information to predict several next transitions. We tested our proposal on Layer7 rule-set and validated it on real traffic traces, experiments show that our approach offers a significant performance improvement by accelerate rate factors from 1.6 to 2.8 over original DFA.
OpenAlex reports 2 citations for this work. Citation counts describe recorded attention and do not establish research quality.
A contribution statement is not available in the OpenAlex record.
Method details are not available in the OpenAlex metadata.
Findings are not separately available in the OpenAlex metadata.
Limitations are not available in the OpenAlex metadata.
Application details are not available in the OpenAlex metadata.
Deep packet inspection has become extremely important due to network security. In deep packet inspection, the packet payload is compared against a set of patterns specified as regular expressions. Regular expressions are often implemented as deterministic finite automaton (DFA) for matching in linear time at high network link rates. We proposed a predict DFA which can accelerate the processing speed of DFA. A predict DFA uses additional information to predict several next transitions. We tested our proposal on Layer7 rule-set and validated it on real traffic traces, experiments show that our approach offers a significant performance improvement by accelerate rate factors from 1.6 to 2.8 over original DFA.
Key concepts: Deep packet inspection, Deterministic finite automaton, Computer science, Network packet, Payload (computing), Deterministic automaton, Set (abstract data type), Regular expression