A fast pattern-match engine for network processor-based network intrusion detection system

International Conference on Information Technology: Coding Computing, ITCC

Volumn 1, Issue , 2004, Pages 97-101

  Liu, Rong Tai ^a   Huang, Nen Fu ^a   Kao, Chia Nan ^a   Chen, Chih Hao ^a   Chou, Chi Chieh ^a  

^a NATIONAL TSING HUA UNIVERSITY   (Taiwan)

Author keywords

[No Author keywords available]

Indexed keywords

ALGORITHMS; BUFFER STORAGE; COMPUTER HARDWARE; COMPUTER NETWORKS; OPTIMIZATION; PROBLEM SOLVING; SEARCH ENGINES; SECURITY OF DATA;

CACHE SIZE; INTRUSION DETECTION SYSTEM (IDS); MULTI-THREADING;

PATTERN MATCHING;

EID: 3042639257     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (17)

1. A. Aho and M. Corasick, "Efficient string matching: An aid to bibliographic search," Communications of the ACM, vol. 18, no. 6, June 1975, pp. 333-343.
2. 2xB: A domainspecific string matching algorithm for intrusion detection," Proceedings of the 18th IFIP International Information Security Conference (SEC2003), May 2003.
3. R. S. Boyer and J. S. Moore, "A fast string searching algorithm," Communications of the ACM, vol. 20, no. 10, Oct. 1977, pp. 762-772.
4. C. Jason Coit, Stuart Staniford, and Joseph McAlerney, "Towards faster patern matching for intrusion detection or exceeding the speed of snort," in Proceedings of the 2nd DARPA Information Survivability Conference and Exposition (DISCEX II), June 2001.
5. DEFCON. http://www.shmoo.com/cctf/
6. Neil Desai: "Increasing Performance in High Speed NIDS".
7. M. Fisk and G. Varghese. "An analysis of fast string matching applied to content-based forwarding and intrusion detection," Technical Report CS2001-0670 (updated version), University of California - San Diego, 2002.
8. R. Nigel Horspool, "Practical fast searching in strings," Software Practice and and Experience, vol. 10, no. 6, 1980, pp. 501-506.
9. IBM: "The Network Processor Enabling Technology for High-Performance Networking," Available from http://www.npforum.org/pressroom/whitepapers. shtml
10. "Intel(R) Network Processor," http://www.intel.com/
11. E.P Markatos, S. Antonatos, M. Polychronakis and K.G Anagnostakis. "ExB: Exclusion-based signature matching for intrusion detection," Proceedings of the IASTED International Conference on Communications and Computer Networks (CCN), Cambridge, USA, November 2002, pp. 146-152.
12. Network ICE: "Protocol Analysis vs Pattern Matching in Network and Host Intrusion Detection Systems".
13. P. Paulin, F.Karim, P. Bromley, "Network Processors: A perspective on Market Requirements, Processor Architectures and Embedded S/W Tools," In Proceedings of the DATE 2001 on Design, automation and test in Europe, IEEE Press, 2001, pp 420-429.
14. "Snort.org," http://www.snort.org/
15. "Spirent.com," http://www.spirentcom.com/
16. "Vitesse.com," http://www.vitesse.com/
17. Sun Wu and Udi Manber, "A fast algorithm for multi-pattern searching," Tech. Rep. TR94-17, Department of Computer Science, University of Arizona, May 1994