Efficient packet classification for network intrusion detection using FPGA

ACM/SIGDA International Symposium on Field Programmable Gate Arrays - FPGA

Volumn , Issue , 2005, Pages 238-245

  Song, Haoyu ^a   Lockwood, John W ^a  

^a WASHINGTON UNIVERSITY   (United States)

Author keywords

BV; FPGA; NIDS; Packet classification; Reconfigurable hardware; TCAM; Tree bitmap

Indexed keywords

ALGORITHMS; COMPUTER ARCHITECTURE; EMBEDDED SYSTEMS; PACKET NETWORKS; SECURITY OF DATA; TELECOMMUNICATION LINKS; TELECOMMUNICATION TRAFFIC; THROUGHPUT;

BV; NIDS; PACKET CLASSIFICATION; RECONFIGURABLE HARDWARE; TCAM; TREE BITMAP;

FIELD PROGRAMMABLE GATE ARRAYS;

EID: 20344366573     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1046192.1046223     Document Type: Conference Paper

References (19)

1. F. Baboescu and G. Varghese. Scalable Packet Classification. In ACM Sigcomm, San Diego, CA, Aug. 2001.
2. Z. Baker and V. Prasanna. Automatic Synthesis of Efficient Intrusion Detection Systems on FPGAs. In Proceedings of FPL'04, 2004.
3. Z. Baker and V. Prasanna. Time and Area Efficient Pattern Matching on FPGAs. In Proceedings of FPGA '04, 2004.
4. Y. Cho and W. Mangione-Smith. Deep Packet Filter with Dedicated Logic and Read Only Memories. In Proceedings of IEEE FCCM'04, 2004.
5. C. Clark and D. Schimmel. Efficient Reconfigurable Logic Circuits for Matching Complex Network Intrusion Detection Patterns. In Proceedings of FPL'03, 2003.
6. B. L. Hutchings, R. Franklin, and D. Carver. Assisting Network Intrusion Detection with Reconfigurable Hardware. In Proceedings of IEEE FCCM'02, 2002.
7. T. V. Lakshman and D. Stiliadis. High-Speed Policy-based Packet Forwarding using Efficient Multi-dimensional Range Matching. In ACM Sigcomm, Sept. 1998.
8. T. Lee, S. Yusuf, W. Luk, M. Sloman, E. Lupu, and N. Dulay. Irregular Reconfiguration CAM Structures for Firewall Application. In Proceedings of FPL '03, 2003.
9. H. Liu. Efficient Mapping of Range Classifier into Ternary-CAM. In IEEE Symposium on High Performance Interconnects (HotI), Stanford, CA, Aug. 2002.
10. J. V. Lunteren and T. Engbersen. Fast and Scalable Packet Classification. IEEE Journal on Selected Areas in Communications, 21:560-570, May 2003.
11. M. Roesch. SNORT - lightweight intrusion detection for networks. In 13th Systems Administration Conference, 1999.
12. I. Sourdis and D. Pnevmatikatos. A Methodology for the Synthesis of Efficient Intrusion Detection Systems on FPGAs. In Proceedings of FCCM'04, 2004.
13. E. Spitznagel, D. Taylor, and J. Turner. Packet Classification using Extended TCAMs. In IEEE International Conference on Network Protocols (ICNP), 2003.
14. V. Srinivasan and G. Varghese. Faster IP Lookups using Controlled Prefix Expansion. In SIGMETRICS, 1998.
15. D. Taylor. Survey and Taxonomy of Packet Classification Techniques. Tech. Report WUCSE-2004-24, Department of CSE, Washington University in St. Louis, 2004.
16. D. Taylor, J. Turner, J. Lockwood, T. Sproull, and D. Parlour. Scalable IP Lookup for Internet Routers. IEEE Journal on Selected Areas in Communications, 21:522-534, May 2003.
17. W.N.Eatherton. Hardware-Based Internet Protocol Prefix Lookups. Master Thesis, Washington University in St. Louis, http://www.arl.wustl.edu/, 1999.
18. Xilinx. Contend-Addressable Memory v4.0. Xilinx Product Specification DS253 (v1.0), March 2003.
19. F. Yu and R. Katz. Efficient Multi-Match Packet Classification and Lookup with TCAM. In IEEE Symposium on High Performance Interconnects (HotI), Stanford, CA, Aug. 2004.