HyperScan

Targeted primarily to network and security product OEMs, HyperScan is an analysis engine with the ability to perform Deep Packet Inspection and especially regular expression matching on network traffic. OEMs would use the engines within their Networking and Security gear whenever traffic needs to be analyzed and matched for specific patterns; such as recognizing known attack methods or vulnerability exploits.

Developed as a userland library in C/C++, HyperScan itself consists of multiple, specialty scanning engines, which the vendor states are "... unique and tailored for different tasks and tuned to deliver optimal performance for certain parts of signatures, expressions and applications." Full PCRE (Perl-Compatible Regular Expression) support is included; in fact, the product boasts an API identical to libPCRE and is therefore billed as a drop-in replacement for that library.

In addition to the product's scanning abilities, HyperScan includes a compilation stage that allows for the optimized conversion of signature libraries/DBs for use in multiple scanning engines simultaneously. Performance-wise, the vendor lists CLAM signature scanning performance at up to 18.96 Gb/sec, while SNORT HTTP performance is listed at up to 28.88 Gb/sec (1,500 byte packets). The vendor states that the product is linearly (and sometimes "super-linearly") scalable over multiple CPU cores (the metrics provided above are for 8 CPU cores), with special optimizations present that keep relevant data in L1/L2 cache as needed.

HyperScan ships with supporting tools, documentation, and sample apps.

Contact Sensory Networks for further information.