ABSTRACT
With the continuous development of network information security requirements, the traditional role in TCP/IP protocol stack layer 2 and layer 3 of firewall and other security products have been unable to meet the needs of the people. Now people are more concerned with what is on the network transmission, and whether or not these content will cause harm. As a result, the IPS (Intrusion Protection System) and AV (Antivirus) security products based on content detection becoming a mainstream [1]. However, a key problem restricts the development of such products, which is the function.
