Abstract

As the Internet continues to increase in popularity, new and more powerful technologies are emerging. These technologies are integrated into network applications for processing data as it traverses across the Internet. Currently, many network applications are designed to provide network security. Such technologies include spam filters, virus scanners, and network intrusion detection and prevention systems. Other applications include packet filters, content-based routing, and natural language processing. At the core of each of these systems resides a rule-based pattern matcher, capable of detecting strings and/or regular expressions.
In recent years, many researchers have developed pattern matching hardware architectures capable of keeping pace with increasing network speeds and rule sets. However, naive pattern matchers do not consider the context of a match in the data. Therefore, they are susceptible to false positive identification. On a high-speed network, even a small number of false positives can surmount to an unmanageable amount of data.

Date

November 5, 2025

Authors

James Moscola, Young H Cho, John W Lockwood

Publisher

May