A parallel "string matching engine" for use in high speed network intrusion detection systems

Journal in Computer Virology

Volumn 2, Issue 1, 2006, Pages 21-34

  Tripp, Gerald ^a  

^a UNIVERSITY OF KENT   (United Kingdom)

Author keywords

[No Author keywords available]

Indexed keywords

EID: 33748938594     PISSN: 17729890     EISSN: 17729904     Source Type: Journal    
DOI: 10.1007/s11416-006-0010-4     Document Type: Conference Paper

References (22)

1. Abbes, T., Bouhoula, A., Rusinowitch, M.: Protocol analysis in intrusion detection using decision tree. In: Proceedings of international conference on information technology: coding and computing (ITCC'04), Volume 1 (pp. 404-408). Las Vegas. Nevada (2004)
2. Aho, A.V., Corasick. M.J.: Efficient string matching: an aid to bibliographic search. Commun ACM 18(6), 333-340 (1975)
3. Attig, M., Lockwood, J.W.: SIFT: snort intrusion filter for TCP. In: Proceedings of IEEE symposium on high performance interconnects (Hot Interconnects-13). Stanford. California (2005)
4. Baker, Z.K., Prasanna, V.K.: A methodology for synthesis of efficient intrusion detection systems on FPGAs, In: Proceedings of IEEE symposium on field-programmable custom computing machines FCCM '04. Napa, California (2004)
5. Boyer, R.S., Moore, J.S.: A fast string searching algorithm, commun, assoc. comput. mach. 20(10), 762-772 (1977)
6. Cho, Y., Mangione-Smith, W.: Deep packet filter with dedicated logic and read only memories. In: Proceedings of IEEE symposium on field-programmable custom computing machines FCCM "04. Napa, California (2004)
7. Clark, C. Schimmel, D.: Scalable multi-pattern matching on high-speed networks. In: Proceedings of IEEE symposium on field-programmable custom computing machines FCCM '04. Napa, California (2004)
8. Fisk, M., Varghese, G.: An analysis of fast string matching applied to content-based forwarding and intrusion detection (2001) (successor to UCSD TR CS2001-0670, UC San Diego, 2001). Retrieved 9 March 2006. from http://public.lanl.gov/mfisk/papers/setmatch-raid.pdf
9. Franklin, R., Carver, D., Hutchings, B.L.: Assisting network intrusion detection with reconfigurable hardware. In: Proceedings of IEEE symposium on field-programmable custom computing machines FCCM '02. pp. 111-120. Napa, California. USA (2002)
10. Hopcroft. J.E., Motwani, R., Ullman, J.D.: Introduction to automata theory, languages and computation, 2nd edition. Addison-Wesley, Reading (2001)
11. Iyer, S., Rao Kompella, R., Shelat, A.: ClassiPi: an architecture for fast and flexible packet classification. IEEE Network, 15(2), 33-41 (2001)
12. Knuth, D.E., Morris J.H., Pratt, V.B.: Fast pattern matching in strings. SIAM J Comput, 6(2), 323-350 (1977)
13. Kruegel, C., Toth, T.: Using decision trees to improve signature-based intrusion detection. In: Proceedings of the 6th symposium on recent advances in intrusion detection (RAID2003), Lecture Notes in Computer Science, LNCS 2820. pp. 173-191. Springer Berlin Heidelberg New York (2003)
14. Larsen, J., Haile, J.: Securing an unpatchable Webserver ... Hog Wash. Retrieved 9 March 2006. (2001) from hup://www.securityfocus.com/infocus/1208
15. Moscola. J., Lockwood, J., Loui, R.R., Faches, M.: Implementation of a content-scanning module for an internet firewall. In: Proceedings of IEEE symposium on field-programmable custom computing machines FCCM '03. Napa, California (2003)
16. Paul. O.: Improving distributed firewalls performance through vertical load balancing. In: Proceedings of third IFIP-TC6 networking conference. NETWORKING 2004. Lecture Notes in Computer Science. LNCS 3042 pp. 25-37. Springer Berlin Heidelberg New York (2004)
17. Roesch, M.: Snort - lightweight intrusion detection for networks. In: Proceedings of LISA '99: 13th systems administration conference, pp. 229-238. Seattle. WA : USENIX (1999)
18. Sidhu, R. Prasanna, V.K.: Fast regular expression matching using FPGAs. In: Proceedings of the 9th international IEEE symposium on FPGAs for custom computing machines. FCCM'01. Rohnert Park. California. USA (2001)
19. Sugawara, Y., Inaha, M., Hiraki, K.: Over 10 Ghps string matching mechanism for multi-stream packet scanning systems. In: Proceedings of field programmable logic and applications, 14th international conference, FPL 2004. pp. 484-493. Springer Berlin Heidelberg New York (2004)
20. Tan, L., Sherwood, T.: A high throughput string matching architecture for intrusion detection and prevention. In: The proceedings of the 32nd annual international symposium on computer architecture (ISCA 2005). Madison. Wisconsin. USA (2005)
21. Tripp, G.: A finite-state-machine based string matching system for intrusion detection on high-speed networks. In: Paul Turner, Vlasti Broucek (eds) EICAR conference best paper proceedings, pp. 26-40. Saint Julians. Malta (2005)
22. Xilinx Virtex-II Platform FPGAs: complete data sheet -product specification. (2005). Xilinx Inc. Retrieved 9 March 2006 from http://direct.xilinx.com/hvdocs/publications/ds031.pdf