Graph generation method for graph-based search

摘要

Computer based method for generation of a graph representation of a rule set for searching data transiting a network using a graph-based search model. A set of rules that describe strings or patterns of data to be identified in the data set, is expressed as a graph. As blocks of the data set are obtained for processing, the state of the graph is updated based upon the value of the received data block. The transition to the next state depends upon both the current state and the received data block. As blocks of data are received and processed, the graph is traversed until one of the rules is identified.

主权项

1. A computer-based method for generation of a graph representation of a rule set, the method comprising:
setting a first rule list equal to the rule set; and performing a recursive process on the first rule list, wherein the recursive process comprises:
setting a second rule list equal to the first rule list;when the second rule list includes more than one rule, for each rule in the second rule list:
selecting the rule for processing;determining at least one verification set for said selected rule, wherein said at least one verification set is composed of individual offsets or data fields that define said selected rule, and data ranges for each individual offset or data field;creating a third rule list for the at least one verification set, wherein the third rule list represents a subgraph that is a portion of the graph representation;updating the individual offsets or data fields of the at least one verification set;adding the at least one verification set to the second rule list; andperforming the recursive process on the third rule set to generate a new subgraph.