A framework for rule processing in reconfigurable network systems

Proceedings - 13th Annual IEEE Symposium on Field-Programmable Custom Computing Machines, FCCM 2005

Volumn 2005, Issue , 2005, Pages 225-234

  Attig, Michael ^a   Lockwood, John ^a  

^a WASHINGTON UNIVERSITY IN ST LOUIS   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

INTRUSION DETECTION SYSTEMS (IDS); NETWORK ADMINISTRATORS; RECONFIGURABLE NETWORK SYSTEMS; RULE PROCESSING; STRING MATCHING;

COMPUTER HARDWARE; DATA FLOW ANALYSIS; DATA PROCESSING; INTERNET; MULTIPROCESSING SYSTEMS; NETWORK PROTOCOLS;

COMPUTER NETWORKS;

EID: 33746158996     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/FCCM.2005.7     Document Type: Conference Paper

References (24)

1. Vern Paxson, Stuart Staniford, and Nicholas Weaver, "How to Own the internet in your spare time," in Proceedings of the 11th Usenix Security Symposium, Aug. 2002.
2. N. Weaver, D. Ellis, S. Staniford, and V Paxson, "Worms vs. perimeters: The case for hard-lans," in Symposium on High Performance Interconnects (HotI), Stanford, CA, Aug. 2004.
3. Lambert Schaelicke, Thomas Slabach, Branden Moore, and Curt Freeland, "Characterizing the performance of network intrusion detection sensors," in Proceedings of the Sixth International Symposium on Recent Advances in Intrusion Detection (RAID 2003), Berlin-Heidelberg-New York, September 2003, Lecture Notes in Computer Science, Springer-Verlag.
4. W. Lee, J. B. Cabrera, A. Thomas, N. Balwalli, S. Saluja, and Y. Zhang, "Performance adaptation in real-time intrusion detection systems," in Proceedings of the Fifth International Symposium on Recent Advances in Intrusion Detection (RAID 2002), Zurich, Switzerland, Oct. 2002, Lecture Notes in Computer Science, Springer-Verlag.
5. John W. Lockwood, Christopher Neely, Christopher Zuver, James Moscola, Sarang Dharmapurikar, and David Lim, "An extensible, system-on- programmable-chip, content-aware Internet firewall," in Field Programmable Logic and Applications (FPL), Lisbon, Portugal, Sept. 2003, p. 14B.
6. Maya Gokhale, Dave Dubois, Andy Dubois, Mike Boorman, Steve Poole, and Vie Hogsett, "Granidt:Towards gigabit rate network intrusion detection tech-nology," in 12th Conference on Field Programmable Logic and Applications, Montpellier, France, 2002, pp. 404-413, Springer-Verlag.
7. Martin Roesch, "SNORT - lightweight intrusion detection for networks," in LISA '99: USENIX 13th Systems Administration Conference on System administration, Seattle, Washington, Nov. 1999, pp. 229-238.
8. David V. Schuehler, "Techniques for processing TCP/IP flow content in network switches at gigabit line rates," PhD dissertation, Washington University in St. Louis, 2004.
9. David V. Schuehler and John W. Lockwood, "A modular system for FPGA-based TCP flow processing in high-speed networks," in Field Programmable Logic and Application: 14th International Conference, FPL 2004, Leuven, Belgium, August 30-September 1, 2004. Proceedings, Antwerp, Belgium, Aug. 2004, pp. 301-310, Springer-Verlag.
10. David Nguyen, Joseph Zambreno, and Gokhan Memik, "Flow monitoring in high-speed networks with 2D hash tables," in Field Programmable Logic and Application: 14th International Conference, FPL 2004, Leuven, Belgium, August 30-September 1, 2004. Proceedings, Antwerp, Belgium, Aug. 2004, pp. 1093-1097, Springer-Verlag.
11. Marc Necker, Didier Contis, and David Schimmel, "TCP-stream reassembly and state tracking in hardware," in IEEE Symposium on Field-Programmable Custom Computing Machines (FCCM), Napa, CA, Apr. 2002.
12. Andy Currid, "TCP offload to the rescue," Queue, vol. 2, no. 3, pp. 58-65, 2004.
13. R. Katz F. Yu, "Efficient multi-match packet classification and lookup with TCAM," in 12th Annual Proceedings of IEEE Hot Interconnects, Stanford, CA, Aug. 2004, pp. 0-1.
14. Haoyu Song and John Lockwood, "Efficient packet classification for network intrusion detection using FPGA," in IEEE Internation Symposium on Field-Programmable Gate Arrays, (FPGA'05), Monterey, CA, Feb. 2005, pp. 238-245.
15. R. Franklin, D. Carver, and B. L. Hutchings, "Assisting network intrusion detection with reconfigurable hardware," in IEEE Symposium on Field-Programmable Custom Computing Machines (FCCM), Napa, CA, Apr. 2002.
16. Zachary K. Baker and Viktor K. Prasanna, "A methodology for synthesis of efficient intrusion detection systems on FPGAs," in IEEE Symposium on Field-Programmable Custom Computing Machines, (FCCM), Napa, CA, Apr. 2004.
17. Christopher R. Clark and David E. Schimmel, "Scalable multi-pattern matching on high-speed networks," in IEEE Symposium on Field-Programmable Custom Computing Machines, (FCCM), Napa, CA, Apr. 2004.
18. James Moscola, John Lockwood, Ronald P. Loui, and Michael Pachos, "Implementation of a content-scanning module for an Internet firewall," in FCCM, Napa, CA, Apr. 2003.
19. Y. Cho and W. Mangione-Smith, "Deep packet filter with dedicated logic and read only memories," in IEEE Symposium on Field-Programmable Custom Computing Machines, (FCCM), Napa, CA, Apr. 2004.
20. Ioannis Sourdis and Dionisios Pnevmatikatos, "Pre-decoded CAMs for efficient and high-speed NIDS pattern matching," in IEEE Symposium on Field-Programmable Custom Computing Machines, (FCCM), Napa, CA, Apr. 2004.
21. Yutaka Sugawara, Mary Inaba, and Kei Hiraki, "Over 10gbps string matching mechanism for multi-stream packet scanning systems," in Field Programmable Logic and Application: 14th International Conference, FPL 2004, Leuven, Belgium, August 30-September 1, 2004. Proceedings, Antwerp, Belgium, Aug. 2004, pp. 484-493, Springer-Verlag.
22. Michael E. Attig, Sarang Dharmapurikar, and John Lockwood, "Implementation results of Bloom filters for string matching," in IEEE Symposium on Field-Programmable Custom Computing Machines, (FCCM), Napa, CA, Apr. 2004, pp. 322-323.
23. Tak W. Yan and Hector Garcia-Molina, "Index structures for selective dissemination of information under the boolean model," ACM Trans. Database Syst., vol. 19, no. 2, pp. 332-364, 1994.
24. John W. Lockwood, Naji Naufel, Jon S. Turner, and David E. Taylor, "Reprogrammable Network Packet Processing on the Field Programmable Port Extender (FPX)," in ACM International Symposium on Field Programmable Gate Arrays (FPGA'2001), Monterey, CA, USA, Feb. 2001, pp. 87-93.