Fast Packet Inspection Using State-Based Bloom Filter Engine

摘要: More and more network security applications depend on inspecting the content of packets to detect malicious attacks. To these attacks online, packet inspection demands exceptionally high performance. A lot research works have been done in this field, yet there is still significant room for improvement throughput scalability. This paper proposes a fast algorithm based state-based Bloom filter engines (SABFE). achieve throughput, parallel design adopted when searching one engine between multiple engines. In addition, specific lookup table prefix register heap are constructed SABFE keep state matched sake detecting long patterns. The analysis evaluation show that can satisfy wire speed detection requirement