High-speed and memory efficient TCP stream scanning using FPGA

Proceedings - 2005 International Conference on Field Programmable Logic and Applications, FPL

Volumn 2005, Issue , 2005, Pages 45-50

  Sugawara, Yutaka ^a   Inaba, Mary ^a   Hiraki, Kei ^a  

^a UNIVERSITY OF TOKYO   (Japan)

Author keywords

[No Author keywords available]

Indexed keywords

COMPUTER NETWORKS; DATA PROCESSING; DATA STORAGE EQUIPMENT; FIELD PROGRAMMABLE GATE ARRAYS;

DROPPING PACKETS; PACKET LOSS; RETRANSMISSION PACKETS; STRING MATCHING;

PATTERN MATCHING;

EID: 33746876743     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/FPL.2005.1515697     Document Type: Conference Paper

References (12)

1. M. Roesch, "Snort - Lightweight Intrusion Detection for Networks," in Proc. of Lisa'99: 13th Administration Conference, 1999.
2. "Enterasys Intrusion Defense," February 2003, http://www.enterasys.com/products/ids/.
3. M. Necker, D. Contis, D. Schimmel, "Tcp-stream reassembly and state tracking in hardware," in Proc. of 10 th Annual IEEE Symp. on Field-Programmable Custom Computing Machines (FCCM'02), September 2002, pp. 286-287.
4. S. Li, J. Tørresen, and O. Søråsen, "Exploiting Stateful Inspection of Network Security in Reconfigurable Hardware," in Proc. of 13th Intl. Conf. on Field Programmable Logic and Applications(FPL '03), September 2003, pp. 1153-1157.
5. D. V. Schuehler, J. Moscola, J. Lockwood, "Architecture for a Hardware Based, TCP/IP Content Scanning System," in Proc. of 11th IEEE Symp. on High Performance Interconnects (HotI '03), August 2003, pp. 89-94.
6. Kevin Fall and Sally Floyd, "Simulation-based comparisons of Tahoe, Reno and SACK TCP," Computer Communication Review, vol. 26, no. 3, pp. 5-21, July 1996.
7. J. Postel, "RFC793 : Transmission Control Protocol," September 1981.
8. M. Handley, V. Paxson, "Network Intrusion Detection : Evasion, Traffic Normalization, and End-to-End Protocol Semantics," in Proc. of 10th USENIX Security Symposium, August 2001.
9. "IP Monitoring Project," http://ipmon.sprint.com/ipmon.php.
10. Y. Sugawara, M. Inaba, K. Hiraki, "Over 10gbps string matching mechanism for multi-stream packet scanning systems," in Proc. of 14th Intl. Conf. on Field Programmable Logic and Applications(FPL '04), August 2004.
11. K. Thompson, G. J. Miller, and F. Wilder, "Wire-area internet traffic patterns and characteristics," IEEE Network Magazine, vol. 11, no. 6, pp. 10-23, November/December 1997.
12. D. V. Schuehler, J. Lockwood, "TCP-Splitter: A TCP Flow Monitor in Reconfigurable Hardware," in Proc. of High Performance Interconnects (HotI '02), August 2002, pp. 127-131.