Pre-decoded CAMs for efficient and high-speed NIDS pattern matching

Proceedings - 12th Annual IEEE Symposium on Field-Programmable Custom Computing Machines, FCCM 2004

Volumn , Issue , 2004, Pages 258-267

  Sourdis, Ioannis ^a   Pnevmatikatos, Dionisios ^a,b  

^a TECHNICAL UNIVERSITY OF CRETE   (Greece)

^b INSTITUTE OF COMPUTER SCIENCE   (Greece)

Author keywords

[No Author keywords available]

Indexed keywords

CHARACTER MATCHING; NETWORK INTRUSION DETECTION SYSTEMS (NIDS); OPERATING FREQUENCIES; STRING MATCHING;

COMPUTER ARCHITECTURE; COMPUTER NETWORKS; DECODING; FINITE AUTOMATA; PATTERN MATCHING; SHIFT REGISTERS; THROUGHPUT;

COMPUTER AIDED MANUFACTURING;

EID: 18644381371     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/FCCM.2004.46     Document Type: Conference Paper

References (16)

1. S. Antonatos, K. G. Anagnostakis, E. P. Markatos, and M. Polychronakis. Performance analysis of content matching intrusion detection systems. In Proceedings of the International Symposium on Applications and the Internet (SAINT2004), Tokyo, Japan, January 2004.
2. Y. H. Cho, S. Navab, and W. Mangione-Smith. Specialized hardware for deep network packet filtering. In Proceedings of 12th International Conference on Field Programmable Logic and Applications, France, 2002.
3. C. R. Clark and D. E. Schimmel. Efficient reconfigurable logic circuit for matching complex network intrusion detection patterns. In Proceedings of 13th International Conference on Field Programmable Logic and Applications, Lisbon, Portugal, 2003.
4. C. J. Coit, S. Staniford, and J. McAlerney. Towards faster string matching for intrusion detection or exceeding the speed of snort. In DISCEXII, DAPRA Information Survivability conference and Exposition, Anaheim, California, USA, June 2001.
5. N. Desai. Increasing performance in high speed NIDS. In www.linuxsecurity.com, March 15 2002.
6. M. Fisk and G. Varghese. An analysis of fast string matching applied to content-based forwarding and intrusion detection. In Techical Report CS2001-0670 (updated version), University of California - San Diego, 2002.
7. R. Franklin, D. Carver, and B. Hutchings. Assisting network intrusion detection with reconfigurable hardware. In IEEE Symposium on Field-Programmable Custom Computing Machines, April 2002.
8. M. Gokhale, D. Dubois, A. Dubois, M. Boorman, S. Poole, and V. Hogsett. Granidt: Towards gigabit rate network intrusion detection technology. In Proceedings of 12th International Conference on Field Programmable Logic and Applications, France, 2002.
9. J. W. Lockwood. An open platform for development of network processing modules in reconfigurable hardware. In lEC DesignCon '01, Santa Clara, CA, USA, January 2001.
10. J. Moscola, J. Lockwood, R. P. Loui, and M. Pachos. Implementation of a content-scanning module for an internet firewall. In IEEE Symposium on Field-Programmable Custom Computing Machines, Napa, CA, USA, April 2003.
11. D. V. Pryor, M. R. Thistle, and N. Shirazi. Text searching on splash 2. In Proceedings of IEEE Workshop on FPGAs for Custom Computing Machines, pages 172-177, April 1993.
12. M. Roesch. Snort - lightweight intrusion detection for networks. In Proceedings of LISA'99: 13th Administration Conference, Seattle Washington, USA, November 1999.
13. R. Sidhu and V. K. Prasanna. Fast regular expression matching using FPGAs. In IEEE Symposium on Field-Programmable Custom Computing Machines, Rohnert Park, CA, USA, April 2001.
14. SNORT official web site, http://www.snort.org.
15. I. Sourdis and D. Pnevmatikatos. Fast, large-scale string match for a network intrusion detection system. In Proceedings of 13th International Conference on Field Programmable Logic and Applications, Lisbon, Portugal, 2003.
16. Xilinx. Virtex-II Platform FPGAs: Detailed description. http://direct.xilinx.com/bvdocs/publications/ds031-2.pdf, October 2003.