BLOOM FILTER
The Global Velocity content
security solution utilizes a patent pending approach
of executing deep packet inspection aided by Bloom
filters within hardware. Bloom filters are
extremely space-efficient data structures used to test
whether a particular item belongs to a set.
Benefits of applying the
Bloom filter within hardware include:
- Wire speed content identification and
policy enforcement
- Zero false
negatives – meaning if an item from the
set is encountered in the data stream, its presence will always be
acknowledged
- Cost effective
Using Bloom filters implemented
within programmable logic, the Global Velocity product can
very quickly scan for thousands upon thousands of signatures
with an extremely small false positive probability, meaning
items not in the set are sometimes reported as belonging
to the set.
Bringing the false positive
rate below 1% is a simple task, and the validity of matches
in the Bloom filter can be double-checked so the
system does not report false positives to the user.
|
