Cache-Based Scalable Deep Packet Inspection with Predictive Automaton

Abstract--Regular expression (Regex) becomes the standard signature language for security and application detection. Deterministic finite automata (DFAs) are widely used to perform multiple regex matching in linear time. However, when implemented by modern memories, the matching speed turns out to be a tradeoff with the size of DFA. To improve the performance, we propose a generalized caching scheme that strike the boundaries of memory size. We define the concept of local prediction which predicts the memory accesses to the DFA and guides the cache to be replaced with proper states so that the cache hit rate is greatly raised. The idea of using predictive DFA matching specifies an entire new class of approaches. We also develop techniques to intelligently store the DFA using local prediction so that given any replacement policy, the caching scheme would produce nice performance. Evaluation shows that our storage achieves a 30% higher cache hit in comparison with the previously proposed...

• Type: Journal
• Year: 2010
• Where: GLOBECOM
• Authors: Yi Tang, Junchen Jiang, Xiaofei Wang, Yi Wang, Bin Liu
• Keywords: Caching Scheme, Communications, Generalized Caching Scheme, GLOBECOM 2010, Local Prediction