张树壮,罗浩,方滨兴.面向网络安全的正则表达式匹配技术.软件学报,2011,22(8):1838-1854 |
面向网络安全的正则表达式匹配技术 |
Regular Expressions Matching for Network Security |
投稿时间:2010-03-22 修订日期:2010-10-11 |
DOI:10.3724/SP.J.1001.2011.04034 |
中文关键词: 特征匹配 深度包检测 正则表达式 有穷自动机 内存缩减 |
英文关键词:signature matching deep packet inspection regular expression finite automata memory reduction |
基金项目:国家自然科学基金(60903209); 国家重点基础研究发展计划(973)(2007CB311100); 国家高技术研究发展计划(863)(2009AA01Z437, 2007AA01Z406, 2007AA01Z467, 2007AA01Z442, 2007AA01Z474, 2011AA012504) |
|
摘要点击次数: 7344 |
全文下载次数: 8568 |
中文摘要: |
分析了基于有穷状态自动机的正则表达式匹配方法的时间复杂度、空间复杂度以及二者之间的制约关系,深入讨论了在网络安全应用中遇到的特有问题与挑战.围绕这两个问题,对当前出现的多种优化技术和策略进行了全面的综述和评价,最后对未来的研究方向进行了总结和展望. |
英文摘要: |
This paper analyzes the regular expression matching methods’ time complexity, space complexity and the tradeoff between them. The experiences, problems, and challenges encountered by the regular expression matching in network security field are well-classified and discussed in depth. Focusing on the two issues, a comprehensive overview of the current optimizing techniques and strategies adopted by academic and business communities is presented. Finally, a conclusion and some suggestions for future research are put forward. |
HTML 下载PDF全文 查看/发表评论 下载PDF阅读器 |