Invention Grant
US08666931B2 Regular expression matching using TCAMs for network intrusion detection
有权
使用TCAM进行网络入侵检测的正则表达式匹配
- Patent Title: Regular expression matching using TCAMs for network intrusion detection
- Patent Title (中): 使用TCAM进行网络入侵检测的正则表达式匹配
-
Application No.: US13183964Application Date: 2011-07-15
-
Publication No.: US08666931B2Publication Date: 2014-03-04
- Inventor: Xiang-Yang A. Liu , Chad R. Meiners , Eric Torng
- Applicant: Xiang-Yang A. Liu , Chad R. Meiners , Eric Torng
- Applicant Address: US MI East Lansing
- Assignee: Board of Trustees of Michigan State University
- Current Assignee: Board of Trustees of Michigan State University
- Current Assignee Address: US MI East Lansing
- Agency: Harness, Dickey & Pierce, P.L.C.
- Main IPC: G06F15/00
- IPC: G06F15/00 ; G06F15/18

Abstract:
A method is provided for implementing regular expression matching using ternary content-addressable memory devices. The method includes: receiving a set of regular expressions (REs) that specify data elements to be extracted from data packets; constructing a deterministic finite automaton (DFA) from the set of regular expressions; building a state transition table for each node of the deterministic finite automaton; combining the state transition tables into a single lookup table; and instantiating the lookup table in a ternary content-addressable memory device. Additional techniques are provided to reduce the TCAM space and improve RE matching speed.
Public/Granted literature
- US20120072380A1 REGULAR EXPRESSION MATCHING USING TCAMS FOR NETWORK INTRUSION DETECTION Public/Granted day:2012-03-22
Information query