Publication Details
Multi-Stride NFA-Split Architecture for Regular Expression Matching Using FPGA
NFA, FPGA, Regular Expression Matching
Regular expression matching is a time critical operation for any network security system. The NFA-Split is an efficient hardware architecture to match a large set of regular expressions at multigigabit speed with efficient FPGA logic utilization. Unfortunately, the matching speed is limited by processing only single byte in one clock cycle. Therefore, we propose new multi-stride NFA-Split architecture, which increases achievable throughput by processing multiple bytes per clock cycle. Moreover, we investigate efficiency of mapping DU to the FPGA logic and propose new optimizations of mapping NFA-Split architecture to the FPGA. These optimizations are able to reduce up to 71.85% of FPGA LUTs and up to 94.18% of BlockRAMs.
@INPROCEEDINGS{FITPUB10695, author = "Vlastimil Ko\v{s}a\v{r} and Jan Ko\v{r}enek", title = "Multi-Stride NFA-Split Architecture for Regular Expression Matching Using FPGA", pages = "77--88", booktitle = "Proceedings of the 9th Doctoral Workshop on Mathematical and Engineering Methods in Computer Science", year = 2014, location = "Brno, CZ", publisher = "NOVPRESS s.r.o.", ISBN = "978-80-214-5022-6", language = "english", url = "https://www.fit.vut.cz/research/publication/10695" }