Pattern matching engine, terminal apparatus using the same, and method thereof

摘要

Provided is a pattern matching engine. The pattern matching engine calculates an error detection sign of target data and compares the calculated error detection sign with an error detection sign of a malware pattern DB. When the error detection sign of the target data and the error detection sign of the malware pattern DB are identical to each other, the pattern matching engine compares the target data with the malware pattern.

主权项

1. A pattern matching engine, comprising:
an error detection sign comparison unit which calculates an error detection sign of sub-data, which is a part of target data, and compares the calculated error detection sign with an error detection sign of a malware pattern; a matcher which, when the error detection sign of the sub-data and the error detection sign of the malware pattern are identical to each other, compares the sub-data with the malware pattern; a system register configured to store a result of comparison when the sub-data error detection sign is not identical to the malware pattern error detection sign; a buffer configured to store sub-data having a respective error detection sign identical to the malware pattern error detection sign, and wherein at least one of the error detection sign comparison unit, the matcher, the system register, and the buffer is implemented as a hardware component.