FPGA based network intrusion detection using content addressable memories

Proceedings - 12th Annual IEEE Symposium on Field-Programmable Custom Computing Machines, FCCM 2004

Volumn , Issue , 2004, Pages 316-317

  Bu, Long ^a   Chandy, John A ^a  

^a UNIVERSITY OF CONNECTICUT   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

CONTENT ADDRESSABLE MEMORY (CAM); INTRUSION; NETWORK INTRUSION DETECTION SYSTEMS (NIDS); SIGNATURES;

COMPUTER NETWORKS; COMPUTER SOFTWARE; CONTROL SYSTEMS; DATA STORAGE EQUIPMENT; PERFORMANCE; PROGRAM PROCESSORS; SIGNAL PROCESSING;

FIELD PROGRAMMABLE GATE ARRAYS;

EID: 18644386415     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (7)

1. M. Gokhale, D. Dubois, A. Dubois, M. Boorman, S. Poole, and V. Hogsett. Granidt: Towards gigabit rate network intrusion detection technology. In Proceedings of International Conference on Field Programmable Logic and Applications, pages 404-413, 2002.
2. B. L. Hutchings, R. Franklin, and D. Carver. Assisting network intrusion detection with reconfigurable hardware. In Proceedings of the IEEE Symposium on Field-Programmable Custom Computing Machines, pages 111-120, 2002.
3. J. Moscola, J. Lockwood, R. P. Loui, and M. Pachos. Implementation of a content-scanning module for an internet firewall. In Proceedings of the IEEE Symposium on Field-Programmable Custom Computing Machines, 2003.
4. M. Motomura, H. Yamada, and T. Enomoto. A 2k-word dictionary search processor (DISP) with an approximate word search capability. IEEE Journal of Solid-State Circuits, 27(6):883-891, June 1992.
5. M. Roesch. Snort - Lightwieight intrusion detection for networks. In Proceedings of the USENIX LISA Conference, Nov. 1999.
6. R. Sidhu and V. K. Prasanna. Fast regular expression matching using FPGAs. In Proceedings of the IEEE Symposium on Field-Programmable Custom Computing Machines, Apr. 2001.
7. I. Sourdis and D. Pnevmatikatos. Fast, large-scale string match for a 10Gbps FPGA-based network intrustion detection system. In Proceedings of International Conference on Field Programmable Logic and Applications, 2003.