关键词: 多维布隆过滤器, 模式匹配, 位拆分状态机, FPGA, 吞吐量

Abstract: Concerning the defects of traditional rule matching engine, a solution using Multi-dimensional Bloom filters based on FPGA is proposed. The rule matching engine is designed to process both packet header and payload in parallel. The suspicious strings are picked up by the Multi-dimensional Bloom filters engines, and then sent to bit-split state machine for verification. The experimental results demonstrate that the false positive probability of the engine is reduced by using the Multi-dimensional Bloom filters which result in a higher throughput.

Key words: Multi-dimensional bloom filters, pattern matching, bit-split state machinee, FPGA, throughput