Skip Finite Automaton: A Content Scanning Engine to Secure Enterprise Networks

Abstract--Today's file sharing networks are creating potential security problems to enterprise networks, i.e., the leakage of confidential documents. In order to prevent such leakage, we propose the Data Leakage Prevention System (DLPS) which is applied at the entrance of the enterprise network to filter out the outgoing sensitive information. The DLPS is based on a content scanning engine which defines a new type of matching problem, called longest overlap matching which also exits in many other applications as a basic problem, such as the file detection in P2P content networks where contents are delivered by small blocks. We study the problem by comparing it with the traditional pattern matching problem in Deep Packet Inspection (DPI) of Network Intrusion Detection Systems (NIDS) whose solutions are based on finite automata. In order to migrate the hardware platform of matching system of DPI to DLPS, we develop a new finite automata representation called Skip-Finite Automata (Sk...

• Type: Journal
• Year: 2010
• Where: GLOBECOM
• Authors: Junchen Jiang, Yi Tang, Bin Liu, Yang Xu, Xiaofei Wang
• Keywords: Communications, Finite Automata, GLOBECOM 2010, Memory Consumption, Sensitive Information