Character string matching device and method

Abstract

The invention discloses a character string matching device and method. The method is implemented through mutual cooperation of hardware and software, compiling and configuration of a character stringmatching automaton are completed by a CPU of a system, and a core character string matching task of the system is completed by a hardware engine on an FPGA so as to meet the requirements for state convergence and matching performance. The system mainly comprises a CPU module, an FPGA module and a storage module, wherein the FPGA module comprises a matching engine unit, a storage block unit and a storage module controller unit; a character string rule uploaded by a user is compiled into an active state transition table and a secondary active state transition table through an AC algorithm, the active state transition table and the secondary active state transition table are stored in a storage block unit and an external storage module of the FPGA module respectively, and different state transition tables are inquired according to different active states of characters to achieve rapid matching of character strings.

Description

technical field [0001] The invention relates to the technical field of network message detection, in particular to a character string matching device and method. Background technique [0002] Deep packet detection technology is an important technology in high-speed network monitoring technology and the core technology of feature recognition. It is widely used in traffic billing, application layer protocol recognition, intrusion detection systems, network monitoring systems, and computer forensics systems. and other fields. With the development and application of the Internet, the current network is increasingly relying on deep packet inspection technology to identify and detect some key characters in the packet payload. [0003] Deep packet inspection technology mainly uses traditional efficient string matching algorithms such as AC algorithm, WM algorithm and SBOM algorithm. In the deep packet inspection, the character string must be compiled into a finite state automaton...

AI Technical Summary

Problems solved by technology

[0004] The current development of deep packet detection technology mainly faces two challenges: the first is the matching time complexity problem. With the development of network applications, the number of features to be detected is increasing, and the feature complexity is also increasing. , making the matching process more and more complicated; the second challenge is performance requirements. With the explosive increase of Internet traffic, there are high requirements for the processing bandwidth and wire-speed processing capabilities of the packet detection system.

Images