A Study on High Performance String Matching Hardware for Network Intrusion Detection

我们提出了一种基于脉动算法的正则表达式匹配硬件引擎，在执行过程中可以设置病毒模式，用于网络入侵检测。我们还提出了一个近似正则表达式匹配引擎，其中正则表达式匹配和近似字符串匹配相结合。从这些结果，它已经成为可能，构建一个网络入侵检测系统，它可以处理未知的网络病毒在一个灵活和有效的方式。

We have newly proposed a regular expression matching hardware engine based on a systolic algorithm, in which virus patterns can be set during the execution, for network intrusion detection. We have also presented a matching engine for approximate regular expression matching, in which regular expression matching and approximate string matching were combined. From those results, it has become possible to construct a network intrusion detection system, which can handle unknown network viruses in a flexible and efficient manner.