公开(公告)号：US20170116331A1

公开(公告)日：2017-04-27

申请号：US15299729

申请日：2016-10-21

Applicant: Verint Systems Ltd.

Inventor： Yitshak Yishay

IPC: G06F17/30 ,  H04L29/06

Abstract: An apparatus and techniques for constructing and utilizing a “dynamic dictionary” that is not a compiled dictionary, and therefore does not need to be recompiled in order to be updated. The dynamic dictionary includes respective data structures that represent (i) a management automaton that includes a plurality of management nodes, and (ii) a runtime automaton that is derived from the management automaton and includes a plurality of runtime nodes. The runtime automaton may be used to search input data, such as communication traffic over a network, for keywords of interest, while the management automaton manages the addition of keywords to the dynamic dictionary. Typically, at least two (e.g., exactly two) such dynamic dictionaries are used in combination with a static dictionary.

公开(公告)号：US20170078163A1

公开(公告)日：2017-03-16

申请号：US15274377

申请日：2016-09-23

Applicant: Verint Systems Ltd.

Inventor： Eithan Goldfarb ,  Yitshak Yishay

IPC: H04L12/26 ,  H04L12/747 ,  H04L12/741

CPC classification number: H04L43/028 ,  H04L45/742 ,  H04L45/745 ,  H04L63/0263

Abstract: A rule engine configured with at least one hash table which summarizes the rules managed by the engine. The rule engine receives rules and automatically adjusts the hash table in order to relate to added rules and/or in order to remove cancelled rules. The adjustment may be performed while the rule engine is filtering packets, without stopping. The rules may be grouped into a plurality of rule types and for each rule type the rule engine performs one or more accesses to at least one hash table to determine whether any of the rules of that type match the packet. In some embodiments, the rule engine may automatically select the rule types responsive to a set of rules provided to the rule engine and adapt its operation to the specific rules it is currently handling, while not spending resources on checking rule types not currently used.

Abstract translation: 配置有至少一个哈希表的规则引擎，其总结由引擎管理的规则。 规则引擎接收规则并自动调整哈希表，以便与添加的规则相关联和/或为了删除已取消的规则。 可以在规则引擎正在过滤数据包而不停止的情况下执行调整。 规则可以被分组为多个规则类型，并且对于每个规则类型，规则引擎执行对至少一个哈希表的一个或多个访问，以确定该类型的任何规则是否与分组匹配。 在一些实施例中，规则引擎可以响应于提供给规则引擎的一组规则来自动选择规则类型，并且将其操作适应其当前正在处理的特定规则，同时不花费资源来检查当前未使用的规则类型。

公开(公告)号：US09589073B2

公开(公告)日：2017-03-07

申请号：US14263108

申请日：2014-04-28

Applicant: Verint Systems Ltd.

Inventor： Yitshak Yishay

IPC: G06F17/30

CPC classification number: H04L47/20 ,  G06F17/30864 ,  G06F17/30985 ,  G06N5/047 ,  H04L43/18 ,  H04L47/2483

Abstract: Methods and systems for keyword spotting, i.e., for identifying textual phrases of interest in input data. The input data may be communication packets exchanged in a communication network. A keyword spotting system holds a dictionary (or dictionaries) of textual phrases for searching input data. The input data and the patterns are assigned to multiple different pattern matching algorithms. For example, a share of the traffic is handled by one algorithm and smaller traffic shares may be handled by the others. The system monitors the algorithms performance as they process the data to search for a match. The ratio of traffic splitting among the algorithms is dynamically reassigned or adjusted to maximize the overall performance.

Abstract translation: 用于关键字识别的方法和系统，即用于识别输入数据中感兴趣的文本短语。 输入数据可以是在通信网络中交换的通信分组。 关键字发现系统包含用于搜索输入数据的文本短语的字典（或词典）。 将输入数据和模式分配给多个不同的模式匹配算法。 例如，流量的一部分由一种算法处理，较小的流量份额可由其他算法来处理。 系统在处理数据以搜索匹配时监视算法性能。 动态重新分配或调整算法中流量分配的比例，以最大化整体性能。