Snort offloader: A reconfigurable hardware NIDS filter

Proceedings - 2005 International Conference on Field Programmable Logic and Applications, FPL

Volumn 2005, Issue , 2005, Pages 493-498

  Song, Haoyu ^a   Sproull, Todd ^a   Attig, Mike ^a   Lockwood, John ^a  

^a WASHINGTON UNIVERSITY IN ST LOUIS   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

COMPUTER SIMULATION; DIGITAL FILTERS; FIELD PROGRAMMABLE GATE ARRAYS; REAL TIME SYSTEMS; TELECOMMUNICATION LINKS; THROUGHPUT;

NETWORK INTRUSION DETECTION SYSTEMS (NIDS); REAL NETWORKS; SNORT RULE SET; SNORT SOFTWARE;

COMPUTER HARDWARE;

EID: 33746890192     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (17)

1. L. Schaelicke, T. Slabach, B. Moore, and C. Freeland, "Characterizing the Performance of Network Intrusion Detection Sensors," in Proceedings of the Sixth International Symposium on Recent Advances in Intrusion Detection (RAID'03), 2003.
2. W. Lee, J. B. Cabrera, A. Thomas, N. Balwalli, S. Saluja, and Y. Zhang, "Performance adaptation in real-time intrusion detection systems," in Proceedings of the Fifth International Symposium on Recent Advances in Intrusion Detection (RAID 2002), ser. Lecture Notes in Computer Science. Zurich, Switzerland: Springer-Verlag, Oct. 2002.
3. "Snort - The Open Source Network Intrusion Detection System," in http://www.snon.org.
4. E. P. Markatos, S. Antonatos, M. Polychronakis, and K. G. Anagnostakis, "Exclusion-based signature matching for in trusion detection," in IASTED International Conference on Communication and Computer Network (CCN'02), 2002.
5. C. J. Coit, S. Staniford, and J. McAlerney, "Towards faster pattern matching for intrusion detection or exceeding the speed of snort," in Proceedings of DISCEX II, 2001.
6. M. Fisk and G. Varghese, "Applying fast string matching to intrusion detection," 2004.
7. N. Tuck, T. Sherwood, B. Calder, and G. Varghese, "Deterministic memory-efficient string matching algorithms for intrusion detection," in Proceedings of IEEE Infocom, 2004.
8. C. Kruegel, F. Valeur, G. Vigna, and R. Kemmerer, "Stateful Intrusion Detection for High-speed Networks," in Proceedings of IEEE Symposium on Security and Privacy, 2002.
9. K. Watanabe, N. Tsuruoka, and R. Himeno, "Performance of Network Intrusion Detection Cluster System," in Proceedings of The 5th International Symposium on High Performance Computing (ISHPC-V), 2003.
10. R. Sidhu and V. K. Prasanna, "Fast regualr expression matching using fpgas," in IEEE Symposium on FCCM, Apr. 2001.
11. J. Moscola, J. Lockwood, R. P. Loui, and M. Pachos, "Implementation of a content-scanning module for an Internet firewall," in IEEE Symposium on FCCM, Apr. 2003.
12. S. Dharmapurikar, P. Krishnamurthy, T. Sproull, and J. W. Lockwood, "Deep packet inspection using parallel Bloom filters," in IEEE Symposium on High Performance Interconnects, Aug. 2003.
13. F. Yu, R. Katz, and T. Lakshman, "Gigabit Rate Packet Pattern-Matching Using TCAM," in Proceedings of ICNP, 2004.
14. H. Song and J. Lockwood, "Efficient Packet Classification for Network Intrusion Detection Using FPGA," in Proceedings of ACM/SIGDA 13th ACM International Symposium on Field-Programmable Gate Arrays (FPGA'05), 2005.
15. C. Clark, W. Lee, D. Schimmel, D. Contis, M. Kone, and A. Thomas, "A Hardware Platform for Network Intrusion Detection and Prevention," in Proceedings of The 3rd Workshop on Network Processors and Applications (NP3), 2004.
16. F. Braun, J. Lockwood, and M. Waldvogel, "Protocol wrappers for layered network packet processing in reconfigurable hardware," IEEE Micro, 2002.
17. D. Schuehler and J. Lockwood, "A modular system for FPGA-based TCP flow processing in high-speed networks," in 14th International Conference on Field Programmable Logic and Applications (FPL), 2004.