35. The security appliance of claim 34 wherein the processor is further configured to add the possible new unmarked DFA state to the number of DFA states if the other NFA states and the epsilon closure of the other NFA states mapped to the possible new unmarked DFA state are not mapped to an existing DFA state of the number of DFA states and store the possible new unmarked DFA state in the DFA states table.
35. The security appliance of claim 34 wherein the processor is further configured to add the possible new unmarked DFA state to the number of DFA states if the other NFA states and the epsilon closure of the other NFA states mapped to the possible new unmarked DFA state are not mapped to an existing DFA state of the number of DFA states and store the possible new unmarked DFA state in the DFA states table. 37. The security appliance of claim 35 the complier is configured to add the possible new unmarked DFA state to the number of DFA states by determining whether the epsilon closure of the other NFA states mapped to the possible new unmarked states belongs to a final accepting NFA state, and if so, the processor is further configured to add the possible unmarked state as a final accepting DFA state.