SYSTEM AND METHOD FOR KEYWORD SEARCHING USING BOTH STATIC AND DYNAMIC DICTIONARIES

摘要

An apparatus and techniques for constructing and utilizing a “dynamic dictionary” that is not a compiled dictionary, and therefore does not need to be recompiled in order to be updated. The dynamic dictionary includes respective data structures that represent (i) a management automaton that includes a plurality of management nodes, and (ii) a runtime automaton that is derived from the management automaton and includes a plurality of runtime nodes. The runtime automaton may be used to search input data, such as communication traffic over a network, for keywords of interest, while the management automaton manages the addition of keywords to the dynamic dictionary. Typically, at least two (e.g., exactly two) such dynamic dictionaries are used in combination with a static dictionary.

主权项

1. A method, comprising:
adding one or more newly-arrived keywords to a static dictionary, which is represented by a data structure stored in computer memory and needs to be recompiled in order to be updated, by recompiling the static dictionary; during the recompilation of the static dictionary:
adding to both a first dynamic dictionary and a second dynamic dictionary, each of which is represented by a respective data structure stored in computer memory and does not need to be recompiled in order to be updated, any keywords that arrive during the recompilation, andsearching input data using both the first dynamic dictionary and the static dictionary; and following the recompilation, searching input data using both the second dynamic dictionary and the static dictionary.