Invention Grant
- Patent Title: Context-aware pattern matching accelerator
-
Application No.: US15236418Application Date: 2016-08-13
-
Publication No.: US09756081B2Publication Date: 2017-09-05
- Inventor: Zhi Guo , Hongbin Lu , Xu Zhou , Lin Huang , Michael Xie
- Applicant: Fortinet, Inc.
- Applicant Address: US CA Sunnyvale
- Assignee: Fortinet, Inc.
- Current Assignee: Fortinet, Inc.
- Current Assignee Address: US CA Sunnyvale
- Agency: Hamilton, DeSanctis & Cha LLP
- Main IPC: H04L12/28
- IPC: H04L12/28 ; H04L29/06 ; H04L12/727 ; H04L12/801 ; G06F21/56 ; G06F21/71

Abstract:
Methods and systems for improving accuracy, speed, and efficiency of context-aware pattern matching are provided. According to one embodiment, a packet stream is received by a first stage of a CPMP hardware accelerator of a network device. A pre-matching process is performed by the first stage to identify a candidate packet that matches a string or over-flow pattern associated with IPS or ADC rules. A candidate rule is identified based on a correlation of results of the pre-matching process. The candidate packet is tokened to produce matching tokens and corresponding locations. A full-match process is performed on the candidate packet by a second stage of the CPMP hardware accelerator to determine whether it satisfies the candidate rule by performing one or more of (i) context-aware pattern matching, (ii) context-aware string matching and (iii) regular expression matching based on contextual information, the matching tokens and the corresponding locations.
Public/Granted literature
- US20170041348A1 CONTEXT-AWARE PATTERN MATCHING ACCELERATOR Public/Granted day:2017-02-09
Information query