【摘要】 随着网络带宽的日益增长,病毒和非法信息的形式越来越多,网络安全系统处理的压力越来越大。多串匹配算法作为大部分网络安全系统中的核心扫描部分其性能尤为重要。从微处理器体系结构的角度,用模拟的方法分析了SBOM、AC、WM等三种精确多串匹配算法在大规模规则库的情况下,其性能影响的各种因素,特别是其访存行为特征,并从算法原理上解释了访存性为是如何被影响的。指出当规则库规模增到5000时,由Cache失效引起的性能损失占全部开销的近10%,而且比重随着规则库规模增大而继续变大。更多还原

【Abstract】 Multi-string matching algorithms,as one of the most significant parts in network security system,its performance decides the efficiency of traffic inspection.Analyze the various factors especially memory access behaviors that impact the performance of multi-string matching algorithms.In three typical algorithms,about 10% performance drops are caused by Cache misses with 5 000 patterns.The trend of the drops is enlarging with increasing patterns.更多还原