APFA: Asynchronous Parallel Finite Automaton for Deep Packet Inspection in Cloud Computing

Authors:
Yang Li;Zheng Li;Nenghai Yu;Ke Ma
Affiliations:
MOE-Microsoft Key Laboratory of Multimedia Computing and Communication, University of Science and Technology of China,;MOE-Microsoft Key Laboratory of Multimedia Computing and Communication, University of Science and Technology of China,;MOE-Microsoft Key Laboratory of Multimedia Computing and Communication, University of Science and Technology of China,;MOE-Microsoft Key Laboratory of Multimedia Computing and Communication, University of Science and Technology of China,
Venue:
CloudCom '09 Proceedings of the 1st International Conference on Cloud Computing
Year:
2009

Citing 15
Cited 0

Tree bitmap: hardware/software IP lookups with incremental updates

ACM SIGCOMM Computer Communication Review
Algorithms to accelerate multiple regular expressions matching for deep packet inspection

Proceedings of the 2006 conference on Applications, technologies, architectures, and protocols for computer communications
Advanced algorithms for fast and scalable deep packet inspection

Proceedings of the 2006 ACM/IEEE symposium on Architecture for networking and communications systems
Fast and memory-efficient regular expression matching for deep packet inspection

Proceedings of the 2006 ACM/IEEE symposium on Architecture for networking and communications systems
Network Algorithmics,: An Interdisciplinary Approach to Designing Fast Networked Devices (The Morgan Kaufmann Series in Networking)

Network Algorithmics,: An Interdisciplinary Approach to Designing Fast Networked Devices (The Morgan Kaufmann Series in Networking)
An improved algorithm to accelerate regular expression evaluation

Proceedings of the 3rd ACM/IEEE Symposium on Architecture for networking and communications systems
Curing regular expressions matching algorithms from insomnia, amnesia, and acalculia

Proceedings of the 3rd ACM/IEEE Symposium on Architecture for networking and communications systems
A hybrid finite automaton for practical deep packet inspection

CoNEXT '07 Proceedings of the 2007 ACM CoNEXT conference
XFA: Faster Signature Matching with Extended Automata

SP '08 Proceedings of the 2008 IEEE Symposium on Security and Privacy
Deflating the big bang: fast and scalable deep packet inspection with extended finite automata

Proceedings of the ACM SIGCOMM 2008 conference on Data communication
An improved DFA for fast regular expression matching

ACM SIGCOMM Computer Communication Review
A break in the clouds: towards a cloud definition

ACM SIGCOMM Computer Communication Review
Is Cloud Computing Really Ready for Prime Time?

Computer
Market-Oriented Cloud Computing: Vision, Hype, and Reality of Delivering Computing as the 5th Utility

CCGRID '09 Proceedings of the 2009 9th IEEE/ACM International Symposium on Cluster Computing and the Grid
Private virtual infrastructure for cloud computing

HotCloud'09 Proceedings of the 2009 conference on Hot topics in cloud computing

Quantified Score

Hi-index	0.00

Visualization

Abstract

Security in cloud computing is getting more and more important recently. Besides passive defense such as encryption, it is necessary to implement real-time active monitoring, detection and defense in the cloud. According to the published researches, DPI (deep packet inspection) is the most effective technology to realize active inspection and defense. However, most recent works of DPI aim at space reduction but could not meet the demands of high speed and stability in the cloud. So, it is important to improve regular methods of DPI, making it more suitable for cloud computing. In this paper, an asynchronous parallel finite automaton named APFA is proposed, by introducing the asynchronous parallelization and the heuristically forecast mechanism, which significantly decreases the time consumed in matching while still keeps reducing the memory required. What is more, APFA is immune to the overlapping problem so that the stability is also enhanced. The evaluation results show that APFA achieves higher stability, better performance on time and memory. In short, APFA is more suitable for cloud computing.