A Hardware-Efficient Pattern Matching Architecture Using Process Element Tree for Deep Packet Inspection

Seongyong AHN, Hyejeong HONG, HyunJin KIM, Jin-Ho AHN, Dongmyong BAEK, Sungho KANG
2010 IEICE transactions on communications  
This paper proposes a new pattern matching architecture with multi-character processing for deep packet inspection. The proposed pattern matching architecture detects the start point of pattern matching from multi-character input using input text alignment. By eliminating duplicate hardware components using process element tree, hardware cost is greatly reduced in the proposed pattern matching architecture. key words: network intrusion detection system, deep packet inspection, pattern matching, brute-force algorithm
doi:10.1587/transcom.e93.b.2440 fatcat:unoo26b6qnakrm6p65cjhsy2ge