CYSEP - A cyber-security processor for 10GBPS networks and beyond

Proceedings - IEEE Military Communications Conference MILCOM

Volumn 2, Issue , 2004, Pages 1114-1122

  Chao, H Jonathan ^a   Karri, Ramesh ^a   Lau, Wing Cheong ^b  

^a POLYTECHNIC UNIVERSITY   (United States)

^b LUCENT TECHNOLOGIES   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

CYBER-SECURITY PROCESSOR (CYSEP); DISTRIBUTED DENIAL OF SERVICE (DDOS); INTRUSION DETECTION; MESSAGE AUTHENTICATION;

APPLICATION SPECIFIC INTEGRATED CIRCUITS; CMOS INTEGRATED CIRCUITS; COMPUTER ARCHITECTURE; COMPUTER SYSTEM FIREWALLS; CRYPTOGRAPHY; PARALLEL PROCESSING SYSTEMS; SECURITY OF DATA;

TELECOMMUNICATION NETWORKS;

EID: 27744489607     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (24)

1. M.M. Mano, "Digital Design," Prentice-Hall, 1984, US.
2. C.J. Coit, S. Staniford, J. McAlerney, "Towards Faster String Matching for Intrusion Detection or Exceeding the Speed of Snort," in DARPA Information Survivability Conference and Exposition II, 2001 Procs, VI, Pgs 367-373, 2001.
3. S. Li, J. Torresen, O. Soraasen, "Exploiting Reconfigurable Hardware for Network Security," in Proc. of 11th Annual IEEE Symposium on Field-Programmable Custom Computing Machines (FCCM'03), 2003.
4. S. Dharmapurikar, P. Krishnamurthy, T. Sproull, J. W. Lockwood, "Deep Packet Inspection Using Parallel Bloom Filters," in Symp. on High Performance Interconnects (HotI), Stanford, CA, pp. 44-51, Aug. 20-22, 2003.
5. R. Franklin, D. Carver, and B.L. Hutchings, "Assisting Network Intrusion Detection with Reconfigurable Hardware," in IEEE Symp. on Field Programmable Custom Computing Machines (FCCM), Napa CA, Apr 2002.
6. J. Moscola, J. Lockwood, R. P. Loui, M. Pachos, "Implementation of a Content-Scanning Module for an Internet Firewall," in Field-Programmable Custom Computing Machines (FCCM), Napa, CA, April 9-11, 2003.
7. R. Sidhu and V.K. Prasanna, "Fast Regular Expression Matching using FPGAs," in IEEE Symposium on Field Programmable Custom Computing Machines (FCCM), Rohnert Park, CA, Apr 2001.
8. H. J. Chao, "Next Generation Routers," Proc. Of the IEEE, Vol. 90, Issue 9, pp. 1518-1558, Sep 2002.
9. P. Gupta and N. McKeown, "Packet Classification on multiple fields," ACM SIGCOMM, pp. 147-160, Aug. 1999.
10. G. Zhang and H. J. Chao, "Fast Packet Classification Using Field-Level Trie," in IEEE Globecom, San Francisco, CA, Dec. 2003.
11. D.V. Schuehler and J.W. Lockwood, "Architecture for Hardware Based, TCP/IP Content Scanning System," in Symposium on High Performance Interconnects (HotI), Stanford, CA, pp. 89-94, Aug. 20-22, 2003.
12. R. Karri, K. Wu, P. Mishra, and Y. Kim, "Concurrent error detection of fault-based side-channel cryptanalysis of 128-bit symmetric block ciphers," Proceedings, IEEE Design Automation Conference (DAC), NV, June 2001.
13. Khary Alexander, Ramesh Karri, Igor Minkin, Kajie Wu, Piyush Mishra, and Xuan Li, "Towards 10-100 Gbps Cryptographic Architectures," Procs, International Symp. on Computer and Information Science, Oct. 2002.
14. H. Lipmaa, P. Rogaway, and D. Wagner, "Comments to NIST concerning AES modes of operations: CTR-mode encryption," Symmetric Key Block Cipher Modes of Operation Workshop, MD, USA, Oct. 2000.
15. L. Carter, and M. Wegman. Universal hash functions. Journal of Computer and System Sciences, Vol 18, pp. 143-154, 1979.
16. C. K. Koc. RSA hardware implementation. Technical Report TR 801, RSA Laboratories, April 1996. http://islab.oregonstate.edu/koc/papers/r02rsahw.pdf.
17. th IEEE ASAP, pp. 205-214., 2000.
18. th ACM International Symp. on Field-Programmable Gate Arrays (FPGA2004), Feb, 2004.
19. J. Black, S. Halevi, H. Krawczyk, T. Krovetz, and P. Rogaway. UMAC: Fast and secure message authentication. In M. Wiener, editor, Advances in Cryptology - CRYPTO '99, Vol 1666 of Lecture Notes in Computer Science, pp. 216-233. Springer-Verlag, Berlin Germany, Aug. 1999.
20. S. Halevi, and H. Krawczyk. MMH: Software message authentication in the Gbit/second rates. In Proceedings of the 4th Workshop on Fast Software Encryption, vol. 1267, Springer-Verlag, pp. 172-189, 1997.
21. D. A. McGrew. The Truncated Multi-Modular Hash Function (TMMH), IETF Internet Draft, 2001. http://www.mindspring.com/~dmcgrew/draft-mcgrew-saag-tmmh- 01.txt.
22. Y. Kim, W.C. Lau, M. C. Chuah, and H. J. Chao, "PacketScore: statistics-based overload control against distributed denial-of-service," IEEE INFOCOM 2004, March 2004.
23. C. Estan, and G. Varghese, "New Directions in Traffic Measurement and Accounting," Proceedings of ACM SIGCOMM, August 2002.
24. S. Kasera, J. Pinheiro, C. Loader, M. Karaul, A. Hari, and T. LaPorta, "Fast and Robust Signaling Overload Control," Proceedings of 9th International Conference on Network Protocols (ICNP), November 2001.