skip to main content
10.1145/2658260.2661771acmconferencesArticle/Chapter ViewAbstractPublication PagesancsConference Proceedingsconference-collections
poster

Spectral clustering based regular expression grouping

Authors Info & Claims
Published:20 October 2014Publication History

ABSTRACT

Regular expression matching has been playing an import role in today's network security systems with deep inspection function. However, compiling a set of regular expressions into one Deterministic Finite Automata (DFA) often leads to state explosion, which means huge or even impractical memory cost. Distributing regular expressions into several groups and building DFAs independently has been proved an efficient solution, but the previous grouping algorithms are either locally optimal or time-consuming. In this work, we proposed a new grouping method based on Spectral Clustering, which defines the similarity between regular expressions and then transforms grouping problem to clustering problem. Preliminary experiments illustrate that our grouping algorithm achieves efficient result with much less processing time.

References

  1. F. Yu, Z. Chen, Y. Diao, T. V. Lakshman and R. H. Katz. Fast and Memory-Efficient Regular Expression Matching for Deep Packet Inspection. Proc. of ACM/IEEE ANCS, 2006. Google ScholarGoogle ScholarDigital LibraryDigital Library
  2. J. Rohrer, K. Atasu, J. V. Lunteren and C. Hagleitne. Memory-Efficient Distribution of Regular Expressions for Fast Deep Packet Inspection. Proc. of the 7th IEEE/ACM international conference on hardware/software codesign and system synthesis, 2009. Google ScholarGoogle ScholarDigital LibraryDigital Library
  3. R. Antonello, S. Fernandes, A. Santos, et al. Efficient DFA grouping for traffic identification. Proc. of Global Communications Conference (GLOBECOM), 2012.Google ScholarGoogle ScholarCross RefCross Ref
  4. Z. Fu, K. Wang, L. Cai and J. Li. Intelligent Grouping Algorithms for Regular Expressions in Deep Inspection. Proc. of the 23rd International Conference on Computer Communications and Networks (ICCCN), 2014.Google ScholarGoogle ScholarCross RefCross Ref
  5. Regular Expression Processor, http://regex.wustl.edu/.Google ScholarGoogle Scholar
  6. Snort, http://www.snort.org/.Google ScholarGoogle Scholar
  7. L7-filter, http://l7-filter.clearfoundation.com/.Google ScholarGoogle Scholar

Index Terms

  1. Spectral clustering based regular expression grouping

    Recommendations

    Comments

    Login options

    Check if you have access through your login credentials or your institution to get full access on this article.

    Sign in
    • Published in

      cover image ACM Conferences
      ANCS '14: Proceedings of the tenth ACM/IEEE symposium on Architectures for networking and communications systems
      October 2014
      274 pages
      ISBN:9781450328395
      DOI:10.1145/2658260

      Copyright © 2014 Owner/Author

      Permission to make digital or hard copies of part or all of this work for personal or classroom use is granted without fee provided that copies are not made or distributed for profit or commercial advantage and that copies bear this notice and the full citation on the first page. Copyrights for third-party components of this work must be honored. For all other uses, contact the Owner/Author.

      Publisher

      Association for Computing Machinery

      New York, NY, United States

      Publication History

      • Published: 20 October 2014

      Check for updates

      Qualifiers

      • poster

      Acceptance Rates

      ANCS '14 Paper Acceptance Rate19of57submissions,33%Overall Acceptance Rate88of314submissions,28%

    PDF Format

    View or Download as a PDF file.

    PDF

    eReader

    View online with eReader.

    eReader