FTSE: The FNP-like TCAM searching engine

Proceedings - IEEE Symposium on Computers and Communications

Volumn , Issue , 2005, Pages 863-868

  Liu, Rong Tai ^a   Kao, Chia Nan ^b   Wu, Hung Shen ^b   Shih, Ming Chang ^b   Huang, Nen Fu ^b  

^a Broadweb Corp   (Taiwan)

^b NATIONAL TSING HUA UNIVERSITY   (Taiwan)

Author keywords

[No Author keywords available]

Indexed keywords

FTSE; MULTIPLE-GIGABIT SPEEDS; NETWORK INTRUSION DETECTION SYSTEMS (NIDS); TERNARY CONTENT ADDRESSABLE MEMORY (TCAM);

COMPUTER HARDWARE; COMPUTER NETWORKS; COMPUTER SOFTWARE; COMPUTER SYSTEM FIREWALLS; INTERNET; SECURITY OF DATA; THROUGHPUT;

SEARCH ENGINES;

EID: 27544489331     PISSN: 15301346     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ISCC.2005.75     Document Type: Conference Paper

References (16)

1. DEFCON. http://www.shmoo.com/cctf/
2. S. Dharmapurikar, et al., "Implementation of a Deep Packet Inspection Circuit using Parallel Bloom Filters in Reconfigurable Hardware," IEEE Micro, 2004, pp. 52-61.
3. Neil Desai: "Increasing Performance in High Speed NIDS". Available from http://www.linuxsecurity.com/articles/ intrusion_detection_article-4617.html
4. M. Fisk and G. Varghese. "An analysis of fast string matching applied to content-based forwarding and intrusion detection," Technical Report CS2001-0670 (updated version), University of California - San Diego, 2002.
5. R. Franklin, D. Carver, B. Hutchings, "Assisting network intrusion detection with reconfigurable hardware," IEEE Symposium on Field-Programmable Custom Computing Machines (FCCM'02), Napa, California, Sep. 2002, pp. 121-130.
6. IDT Inc, "Classification and Content Inspection Co-Processor" 2003.
7. "Intel(R) Network Processor," http://www.intel.com/design/ network/products/npfamily/
8. Bo Jiang, Bin Liu, "High-Speed Discrete Content Sensitive Pattern Match Algorithm for Deep Packet Filtering," 2003 International Conference on Computer Networks and Mobile Computing (ICCNMC'03), Shanghai, China, Oct 2003, pp. 149-157.
9. Panos C. Lekkas, "Network Processors: Architectures, Protocols and Platforms", McGraw-Hill Professional 2003.
10. R.T. Liu, N.F. Huang, C.H. Chen, C.N. Kao, "A Fast String Matching Algorithm for Network Processor-Based Intrusion Detection System", ACM Transactions on Embedded Computing Systems, Vol. 3, No. 3, Aug. 2004, pp. 614-633.
11. J. Moscola, J. Lockwood, R.P. Loui, M. Pachos, "Implementation of a content scanning module for an internet firewall," in Proceedings of IEEE Workshop on FPGAs for Custom Computing Machines, Napa, California, Apr. 2003, pp. 31-38.
12. Network ICE: "Protocol Analysis and Command Parsing vs. Pattern Matching in Intrusion Detection Systems," Available from http://oldhand.org/document/ids/Protocol_Analysis_vs_Pattern.pdf
13. "Optical Internetworking Forum", http://www.oiforum.com/
14. R. Sidhu, V.K. Prasanna, "Fast regular expression matching using FPGAs," IEEE Symposium on Field-Programmable Custom Computing Machines, Rohnert Park, CA, Apr. 2001, pp. 223-232.
15. "Snort.org," http://www.snort.org/
16. F. Yu, R. H. Katz, T. V. Lakshman, "Gigabit Rate Packet Pattern-Matching Using TCAM," in Proceeding of 12th IEEE International Conference on Network Protocols (ICNP'04), Berlin, Germany, Oct. 2004, pp. 174-183.