标题：Fast Protocol Recognition by Network Packet Inspection
作者：Chen, Chuantong; Wang, Fengyu; Lin, Fengbo; Guo, Shanqing; Gong, Bin
作者机构：[Chen, Chuantong; Wang, Fengyu; Lin, Fengbo; Guo, Shanqing; Gong, Bin] Shandong Univ, Sch Comp Sci & Technol, Jinan, Peoples R China.
会议名称：18th International Conference on Neural Information Processing (ICONIP 2011)
会议日期：NOV 13-17, 2011
来源：NEURAL INFORMATION PROCESSING, PT II
关键词：Distribution of network traffic; Matching priority; Hybrid-FA; DPI
摘要：Deep packet inspection at high speed has become extremely important due to its applications in network services. In deep packet inspection applications, regular expressions have gradually taken the place of explicit string patterns for its powerful expression ability. Unfortunately, the requirements of memory space and bandwidth using traditional methods are prohibitively high. In this paper, we propose a novel scheme of deep packet inspection based on non-uniform distribution of network traffic. The new scheme separates a set of regular expressions into several groups with different priorities and compiles the groups attaching different priorities with different methods. When matching, the scanning sequence of rules is consistent with their priorities. The experiment results show that the proposed protocol recognition performs 10 to 30 times faster than the traditional NFA-based approach and hold a reasonable memory requirement.