XAV: A High-Performance Regular Expression Matching Engine for Packet Processing
crossref(2024)
摘要
Regular expression matching is the core function of various network security
applications such as network intrusion detection systems. With the network
bandwidth increases, it is a great challenge to implement regular expression
matching for line rate packet processing. To this end, a novel scheme named XAV
targeting high-performance regular expression matching is proposed in this
paper. XAV first employs anchor DFA to tackle the state explosion problem of
DFA. Then based on anchor DFA, two techniques including pre-filtering and regex
decomposition are utilized to improve the average time complexity. Through
implementing XAV with an FPGA-CPU architecture, comprehensive experiments show
that a high matching throughput of up to 75 Gbps can be achieved for the large
and complex Snort rule-set. Compared to state-of-the-art software schemes, XAV
achieves two orders of magnitude of performance improvement. While compared to
state-of-the-art FPGA-based schemes, XAV achieves more than 2.5x performance
improvement with the same hardware resource consumption.
更多查看译文
AI 理解论文
溯源树
样例
生成溯源树,研究论文发展脉络
Chat Paper
正在生成论文摘要