TY - GEN
T1 - SSE instruction and block predetermination-based automaton optimization
AU - Yang, Tianlong
AU - Zhang, Hongli
AU - Cao, Xiaolong
AU - Tian, Zhihong
AU - Qassrawi, Mahmoud T.
PY - 2014
Y1 - 2014
N2 - Techniques to decrease the memory requirements of large patterns set for an intrusion detection system (IDS), block predetermination, and block matching based on a self-balancing binary search tree (AVL) are defined in this chapter. By introducing SSE instruction, the new DFA matching system can increase matching efficiency when compared to the standard AC implementation. For illustration, a number of tests, according to different lengths or different amount of patterns were used to show how many DFA states and how much memory can be saved by the design. Empirical results show that at best an SSE-AVL-based implementation of DFA can save about 98 % of memory usage in common DFA when using randomly generated patterns. The hybrid of block DFA and common character DFA can effectively suppress memory requirements, and with the help of block predetermination with two-level-AVL filtration and SSE instruction, the matching speed performs better than standard AC under single process case.
AB - Techniques to decrease the memory requirements of large patterns set for an intrusion detection system (IDS), block predetermination, and block matching based on a self-balancing binary search tree (AVL) are defined in this chapter. By introducing SSE instruction, the new DFA matching system can increase matching efficiency when compared to the standard AC implementation. For illustration, a number of tests, according to different lengths or different amount of patterns were used to show how many DFA states and how much memory can be saved by the design. Empirical results show that at best an SSE-AVL-based implementation of DFA can save about 98 % of memory usage in common DFA when using randomly generated patterns. The hybrid of block DFA and common character DFA can effectively suppress memory requirements, and with the help of block predetermination with two-level-AVL filtration and SSE instruction, the matching speed performs better than standard AC under single process case.
UR - https://www.scopus.com/pages/publications/84958552424
U2 - 10.1007/978-1-4614-4981-2_244
DO - 10.1007/978-1-4614-4981-2_244
M3 - 会议稿件
AN - SCOPUS:84958552424
SN - 9781461449805
T3 - Lecture Notes in Electrical Engineering
SP - 2229
EP - 2242
BT - Unifying Electrical Engineering and Electronics Engineering - Proceedings of the 2012 International Conference on Electrical and Electronics Engineering
PB - Springer Verlag
T2 - 2012 International Conference on Electrical and Electronics Engineering, ICEE 2012
Y2 - 18 August 2012 through 19 August 2012
ER -