International Journal of New Developments in Engineering and Society, 2020, 4(1); doi: 10.25236/IJNDES.040106.
Wei Anlei, Wang Zhaoshun, Lv Shuwang
1 China Center for Information Industry Development, Beijing, 100044 China
2 School of Computer & Communication Engineering, University of Science and Technology Beijing, Beijing 100083 China
3 State Key Laboratory of Information Security, Chinese Academy of Science, Beijing, 100864 China
Based on the existing single pattern matching algorithm, we propose a fast-single pattern matching algorithm. A next generation firewall system based on DPI (Deep Packet Inspection) technology is designed and implemented where the proposed pattern matching algorithm is applied. Tests with respect to different performance indicators have demonstrated that the performance of the next generation firewall has superior performance to the unimproved one.
DPI technology, next generation firewall, pattern matching algorithm
Wei Anlei, Wang Zhaoshun, Lv Shuwang. A Fast-Single Pattern Matching Algorithm of Next Generation Firewall. International Journal of New Developments in Engineering and Society (2020) Vol.4, Issue 1: 33-40. https://doi.org/10.25236/IJNDES.040106.
[1] Katic T, Pale P (2007). Optimization of firewall rules. Proceedings of the ITI 29th International Conf on Information Technology Interfaces, no. 29, pp.685-690.
[2] Nazief H M, Sabastian T A, Presekal A, et al (2014). Development of University of Indonesia next generation firewall prototype and access control with deep packet inspection. International Conference on Advanced Computer Science and Information Systems. IEEE, pp.47-52.
[3] CORWIN E H (2011). Deep Packet Inspection: Shaping the Internet and the Implications on Privacy and Securit. Information Security Journal: A Global Perspective, vol.20, no.6, pp.311-316.
[4] Min Lianting, Zhao Tingting (2006). Research and Improvement of BM Algorithms. Journal of Wuhan University of Technology (Transportation Science& Engineering), vol.30, no.3, pp.528-30.
[5] Nazief H M, Sabastian T A, Presekal A, et al. Development of University of Indonesia next generation firewall prototype and access control with deep packet inspection. International Conference on Advanced Computer Science and Information Systems. IEEE, 2014:47-52.
[6] L Maccari, RL Cigno (2013). Waterwall: a cooperative, distributed firewall for wireless mesh networks. Eurasip Journal on Wireless Communications and Networking, no.1, pp.1-12.
[7] Olesenbagneux O (2017). The library before print and after the computer: The similarities between string search algorithms and mnemonic retrieval in pre-print libraries. Information Society, vol.33, no.4, pp.205-214.
[8] Horspool R N (2010). Practical fast searching in strings. Software Practice & Experience, 2010, vol.10, no.6, pp.501-506.