An Efficient Data Analysis Framework for Online Security Processing

Algorithm 5

The merging algorithm in Reducer.

	Input: the coming event e
	if e is the begin of one stream item then
	P = scan_index(e).;
	if P is not null then
	E = get_entry(P);
	add the ID of e to event list l;
	ClearBitResult();
	else
	set_bitResult(e);;
	if find_id(e.ID) then
	foreach query q in associated with E do
	insepect_result(q);
	if all predicate result is true then
	output the ID of q;