【摘要】 为了提高网络入侵检测速度和稳定性,提出了一种基于多线程的混合深度包检测方法.该方法首先采用正则表达式的线性系数来对规则集中的正则表达式进行分组,然后对不同正则表达式组采用不同压缩技术进行状态位压缩,生成不同FA(Finite Automata),最后采用多线程技术对生成的不同FA进行检测.通过实验验证,得出该方法具有较高的压缩和处理性能,同时能有效提高检测的速度和稳定性.更多还原

【Abstract】 The paper proposed a deep packet inspection method based on multi-threading. In this method,the regular expressions of the rule sets were grouped by using regular expressions linear coefficient. Then the regular expressions generated different Finite Automata by using different compression technology to compress the status bit. Finally,the different Finite Automata were detected by using multi-threading technology.The experiments show that the method has higher compression and processing performance,and effectively improves the speed and stability of the detection.更多还原