A workload for evaluating deep packet inspection architectures

—High-speed content inspection of network traffic is an important new application area for programmable networking systems, and has recently led to several proposals for high-performance regular expression matching. At the same time, the number and complexity of the patterns present in well-known network intrusion detection systems has been rapidly increasing. This increase is important since both the practicality and the performance of specific pattern matching designs are strictly dependent upon characteristics of the underlying regular expression set. However, a commonly agreed upon workload for the evaluation of deep packet inspection architectures is still missing, leading to frequent unfair comparisons, and to designs lacking in generality or scalability. In this paper, we propose a workload for the evaluation of regular expression matching architectures. The workload includes a regular expression model and a traffic generator, with the former characterizing different levels of...

• Type: Conference
• Year: 2008
• Where: IISWC
• Authors: Michela Becchi, Mark A. Franklin, Patrick Crowley
• Keywords: IISWC 2008, Operating Systems, Regular Expression, Regular Expression Matching, Workload