公开(公告)号：US08250016B2

公开(公告)日：2012-08-21

申请号：US12425576

申请日：2009-04-17

申请人： Nan Hua ,  Tirunell V. Lakshman ,  Haoyu Song

发明人： Nan Hua ,  Tirunell V. Lakshman ,  Haoyu Song

IPC分类号： G06F17/00

CPC分类号： G06K9/62

摘要： A variable-stride multi-pattern matching apparatus segments patterns and input streams into variable-size blocks according to a modified winnowing algorithm. The variable-stride pattern segments are used to determine the block-symbol alphabet for a variable-stride discrete finite automaton (VS-DFA) that is used for detecting the patterns in the input streams. Applications include network-intrusion detection and protection systems, genome matching, and forensics. The modification of the winnowing algorithm includes using special hash values to determine the position of delimiters of the patterns and input streams. The delimiters mark the beginnings and ends of the segments. In various embodiments, the patterns are segmented into head, core, and tail blocks. The approach provides for memory, memory-bandwidth, and processor-cycle efficient, deterministic, high-speed, line-rate pattern matching.

摘要翻译： 可变跨度多模式匹配装置根据修改的风选算法将模式和输入流分割成可变大小的块。 可变步长模式段用于确定用于检测输入流中的模式的可变步长离散有限自动机（VS-DFA）的块符号字母表。 应用包括网络入侵检测和保护系统，基因组匹配和取证。 风选算法的修改包括使用特殊哈希值来确定模式和输入流的分隔符的位置。 分隔符标记段的开头和结尾。 在各种实施例中，图案被分割为头部，芯部和尾部块。 该方法提供了存储器，存储器带宽和处理器周期效率，确定性，高速的线速率模式匹配。

公开(公告)号：US20100266215A1

公开(公告)日：2010-10-21

申请号：US12425576

申请日：2009-04-17

申请人： Nan Hua ,  Tirunell V. Lakshman ,  Haoyu Song

发明人： Nan Hua ,  Tirunell V. Lakshman ,  Haoyu Song

IPC分类号： G06K9/72

CPC分类号： G06K9/62

摘要： A variable-stride multi-pattern matching apparatus segments patterns and input streams into variable-size blocks according to a modified winnowing algorithm. The variable-stride pattern segments are used to determine the block-symbol alphabet for a variable-stride discrete finite automaton (VS-DFA) that is used for detecting the patterns in the input streams. Applications include network-intrusion detection and protection systems, genome matching, and forensics. The modification of the winnowing algorithm includes using special hash values to determine the position of delimiters of the patterns and input streams. The delimiters mark the beginnings and ends of the segments. In various embodiments, the patterns are segmented into head, core, and tail blocks. The approach provides for memory, memory-bandwidth, and processor-cycle efficient, deterministic, high-speed, line-rate pattern matching.

摘要翻译： 可变跨度多模式匹配装置根据修改的风选算法将模式和输入流分割成可变大小的块。 可变步长模式段用于确定用于检测输入流中的模式的可变步长离散有限自动机（VS-DFA）的块符号字母表。 应用包括网络入侵检测和保护系统，基因组匹配和取证。 风选算法的修改包括使用特殊哈希值来确定模式和输入流的分隔符的位置。 分隔符标记段的开头和结尾。 在各种实施例中，图案被分割为头部，芯部和尾部块。 该方法提供了存储器，存储器带宽和处理器周期效率，确定性，高速的线速率模式匹配。

公开(公告)号：US20120201373A1

公开(公告)日：2012-08-09

申请号：US13351704

申请日：2012-01-17

申请人： Nan Hua ,  Eric Norige ,  Sailesh Kumar ,  William Lynch

发明人： Nan Hua ,  Eric Norige ,  Sailesh Kumar ,  William Lynch

IPC分类号： H04L9/28 ,  H03K19/21

CPC分类号： H03K19/21 ,  H04L9/3239 ,  H04L2209/125

摘要： An apparatus comprising a plurality of stages that are coupled in series and configured to implement a hash function, wherein the stages comprise a plurality of XOR arrays and one or more Substitution-Boxes (S-Boxes) that comprise a plurality of parallel gates. Also disclosed is an apparatus comprising a plurality of XOR gates that are coupled in parallel, a plurality of input bits coupled to the XOR gates, and a plurality of output bits coupled to the XOR gates, wherein the XOR gates are configured to implement a linear mixing function of the input bits into the output bits as a stage of a non-cryptographic hash function.

摘要翻译： 一种包括串联耦合并且被配置为实现散列函数的多个级的装置，其中所述级包括多个XOR阵列和包括多个并行门的一个或多个替换盒（S-Box）。 还公开了一种装置，包括并联耦合的多个XOR门，耦合到XOR门的多个输入位以及耦合到XOR门的多个输出位，其中XOR门被配置为实现线性 将输入比特的混合功能作为非加密哈希函数的阶段输出到输出比特中。