{"id":"https://openalex.org/W2209015124","doi":"https://doi.org/10.1109/tifs.2015.2489182","title":"Condition Factorization: A Technique for Building Fast and Compact Packet Matching Automata","display_name":"Condition Factorization: A Technique for Building Fast and Compact Packet Matching Automata","publication_year":2015,"publication_date":"2015-10-09","ids":{"openalex":"https://openalex.org/W2209015124","doi":"https://doi.org/10.1109/tifs.2015.2489182","mag":"2209015124"},"language":"en","primary_location":{"id":"doi:10.1109/tifs.2015.2489182","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2015.2489182","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5022716924","display_name":"Alok Tongaonkar","orcid":null},"institutions":[{"id":"https://openalex.org/I1308906816","display_name":"NortonLifeLock (United States)","ror":"https://ror.org/0449t3a80","country_code":"US","type":"company","lineage":["https://openalex.org/I1308906816"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Alok Tongaonkar","raw_affiliation_strings":["Symantec, San Francisco, CA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Symantec, San Francisco, CA, USA","institution_ids":["https://openalex.org/I1308906816"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5102886132","display_name":"R. Sekar","orcid":"https://orcid.org/0009-0008-9135-3296"},"institutions":[{"id":"https://openalex.org/I59553526","display_name":"Stony Brook University","ror":"https://ror.org/05qghxh33","country_code":"US","type":"education","lineage":["https://openalex.org/I59553526"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"R. Sekar","raw_affiliation_strings":["Stony Brook University, Stony Brook, NY, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Stony Brook University, Stony Brook, NY, USA","institution_ids":["https://openalex.org/I59553526"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.9883,"has_fulltext":false,"cited_by_count":3,"citation_normalized_percentile":{"value":0.77219344,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":96,"max":97},"biblio":{"volume":"11","issue":"3","first_page":"468","last_page":"483"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12326","display_name":"Network Packet Processing and Optimization","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12326","display_name":"Network Packet Processing and Optimization","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9984999895095825,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9908000230789185,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8249391317367554},{"id":"https://openalex.org/keywords/header","display_name":"Header","score":0.6540471315383911},{"id":"https://openalex.org/keywords/matching","display_name":"Matching (statistics)","score":0.5667673349380493},{"id":"https://openalex.org/keywords/network-packet","display_name":"Network packet","score":0.5571534037590027},{"id":"https://openalex.org/keywords/automaton","display_name":"Automaton","score":0.5465918779373169},{"id":"https://openalex.org/keywords/nondeterministic-algorithm","display_name":"Nondeterministic algorithm","score":0.5216413140296936},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.49188995361328125},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.45689013600349426},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.44594234228134155},{"id":"https://openalex.org/keywords/deterministic-finite-automaton","display_name":"Deterministic finite automaton","score":0.43435001373291016},{"id":"https://openalex.org/keywords/algorithm","display_name":"Algorithm","score":0.34114208817481995},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.20619654655456543},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.1237349808216095},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.11684376001358032}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8249391317367554},{"id":"https://openalex.org/C48105269","wikidata":"https://www.wikidata.org/wiki/Q1141160","display_name":"Header","level":2,"score":0.6540471315383911},{"id":"https://openalex.org/C165064840","wikidata":"https://www.wikidata.org/wiki/Q1321061","display_name":"Matching (statistics)","level":2,"score":0.5667673349380493},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.5571534037590027},{"id":"https://openalex.org/C112505250","wikidata":"https://www.wikidata.org/wiki/Q787116","display_name":"Automaton","level":2,"score":0.5465918779373169},{"id":"https://openalex.org/C176181172","wikidata":"https://www.wikidata.org/wiki/Q3490301","display_name":"Nondeterministic algorithm","level":2,"score":0.5216413140296936},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.49188995361328125},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.45689013600349426},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.44594234228134155},{"id":"https://openalex.org/C104091681","wikidata":"https://www.wikidata.org/wiki/Q837528","display_name":"Deterministic finite automaton","level":3,"score":0.43435001373291016},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.34114208817481995},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.20619654655456543},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.1237349808216095},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.11684376001358032},{"id":"https://openalex.org/C105795698","wikidata":"https://www.wikidata.org/wiki/Q12483","display_name":"Statistics","level":1,"score":0.0},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tifs.2015.2489182","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2015.2489182","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G5909444678","display_name":null,"funder_award_id":"CNS-0831298","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G7268679954","display_name":null,"funder_award_id":"CNS-1319137","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G8548027855","display_name":null,"funder_award_id":"CNS-0627687","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":56,"referenced_works":["https://openalex.org/W79029001","https://openalex.org/W109398353","https://openalex.org/W1507645144","https://openalex.org/W1516506771","https://openalex.org/W1538230433","https://openalex.org/W1554891714","https://openalex.org/W1590238182","https://openalex.org/W1603044293","https://openalex.org/W1628216882","https://openalex.org/W1674877186","https://openalex.org/W1971417898","https://openalex.org/W1992811742","https://openalex.org/W2006508099","https://openalex.org/W2014294283","https://openalex.org/W2030102079","https://openalex.org/W2054081858","https://openalex.org/W2058419383","https://openalex.org/W2062652918","https://openalex.org/W2072453486","https://openalex.org/W2083002627","https://openalex.org/W2087496774","https://openalex.org/W2091166120","https://openalex.org/W2096474000","https://openalex.org/W2099964107","https://openalex.org/W2100583963","https://openalex.org/W2108962885","https://openalex.org/W2113425091","https://openalex.org/W2115345034","https://openalex.org/W2127687018","https://openalex.org/W2136337200","https://openalex.org/W2138381338","https://openalex.org/W2143377393","https://openalex.org/W2144801155","https://openalex.org/W2150740451","https://openalex.org/W2152544235","https://openalex.org/W2152980239","https://openalex.org/W2159141832","https://openalex.org/W2159669151","https://openalex.org/W2164905748","https://openalex.org/W2169422258","https://openalex.org/W2911631328","https://openalex.org/W2912330988","https://openalex.org/W3023050017","https://openalex.org/W4242309756","https://openalex.org/W4253088248","https://openalex.org/W6603209019","https://openalex.org/W6604457318","https://openalex.org/W6630856255","https://openalex.org/W6635317570","https://openalex.org/W6636806898","https://openalex.org/W6676742638","https://openalex.org/W6680395981","https://openalex.org/W6680653849","https://openalex.org/W6681913618","https://openalex.org/W6682420538","https://openalex.org/W6758168668"],"related_works":["https://openalex.org/W2988433590","https://openalex.org/W2941716987","https://openalex.org/W103257385","https://openalex.org/W2308268057","https://openalex.org/W2896435359","https://openalex.org/W2109628733","https://openalex.org/W2112300978","https://openalex.org/W2143950972","https://openalex.org/W2088692479","https://openalex.org/W341413838"],"abstract_inverted_index":{"Rule-based":[0],"matching":[1,28,78,105,168],"on":[2,131,146],"network":[3,13,44],"packet":[4,132],"headers":[5],"is":[6,110,123],"a":[7,27,42,92,141],"central":[8],"problem":[9],"in":[10,63,120,156,167],"firewalls,":[11],"and":[12,16,127,176,179],"intrusion,":[14],"monitoring,":[15],"access-control":[17],"systems.":[18],"To":[19],"enhance":[20],"performance,":[21,52],"rules":[22,37],"are":[23,39],"typically":[24],"compiled":[25],"into":[26],"automaton":[29],"that":[30,38,57,95,103,124,136,182],"can":[31,60,72,80,143,172],"quickly":[32,82],"identify":[33],"the":[34,50,64,84,104,113,129,137],"subset":[35],"of":[36,68,86,107,115,125,139,148],"applicable":[40],"to":[41,112],"given":[43],"packet.":[45],"While":[46],"deterministic":[47],"automata":[48,59,71,109],"provide":[49],"best":[51],"previous":[53,160],"research":[54],"has":[55],"shown":[56],"such":[58],"be":[61,144],"exponential":[62],"size":[65,74,98],"and/or":[66],"number":[67,85,114],"rules.":[69,87,116,150],"Nondeterministic":[70],"avoid":[73],"explosion,":[75],"but":[76],"their":[77],"time":[79,106],"increase":[81],"with":[83],"In":[88],"contrast,":[89],"we":[90,101],"present":[91],"new":[93],"technique":[94,171],"constructs":[96],"polynomial":[97],"automata.":[99],"Moreover,":[100],"show":[102],"our":[108,121],"insensitive":[111],"The":[117],"key":[118],"idea":[119],"approach":[122],"decomposing":[126],"reordering":[128],"tests":[130],"header":[133],"fields":[134],"so":[135],"result":[138],"performing":[140],"test":[142],"utilized":[145],"behalf":[147],"many":[149],"Our":[151,170],"experiments":[152],"demonstrate":[153],"major":[154],"reductions":[155],"space":[157],"requirements":[158],"over":[159],"techniques,":[161],"as":[162,164,185,187],"well":[163,186],"significant":[165],"improvements":[166],"speed.":[169],"uniformly":[173],"handle":[174],"prioritized":[175],"unprioritized":[177],"rules,":[178],"support":[180],"applications":[181],"require":[183],"single-match":[184],"multi-match.":[188]},"counts_by_year":[{"year":2016,"cited_by_count":3}],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-10-10T00:00:00"}