Efficient multimatch packet classification for network security applications

IEEE Journal on Selected Areas in Communications

Volumn 24, Issue 10, 2006, Pages 1805-1815

  Yu, Fang ^a,b   Lakshman, T V ^c   Motoyama, Martin Austin ^b,d   Katz, Randy H ^a,b  

^a IEEE   (United States)

^b UNIVERSITY OF CALIFORNIA   (United States)

^c LUCENT TECHNOLOGIES   (United States)

^d UNIVERSITY OF CALIFORNIA   (United States)

Author keywords

Energy efficient design; Multiple match; Packet classification; Ternary content addressable memory (TCAM)

Indexed keywords

ENERGY-EFFICIENT DESIGN; MULTIPLE-MATCH; PACKET CLASSIFICATION; TERNARY CONTENT ADDRESSABLE MEMORY (TCAM);

ALGORITHMS; ASSOCIATIVE STORAGE; PACKET NETWORKS; PROBLEM SOLVING; SECURITY SYSTEMS;

CLASSIFICATION (OF INFORMATION);

EID: 33749871036     PISSN: 07338716     EISSN: None     Source Type: Journal    
DOI: 10.1109/JSAC.2006.877134     Document Type: Article

References (32)

1. K. Lakshminarayanan, A. Rangarajan, and S. Venkatachary, "Algorithms for advanced packet classification with ternary CAMs," in Pioc. ACM SIGCOMM, 2005.
2. F. Yu and R. H. Katz, "Efficient multi-match packet classification with TCAM," in Proc. Hot Interconnects, Aug. 2004, pp. 28-34.
3. SNORT network intrusion detection system, [Online]. Available: http://www.snort.org
4. S. Dharmapurikar, M. Attig, and J. Lockwood, "Deep packet inspection using parallel bloom filters," IEEE Micro, vol. 24, no. 1, pp. 52-61, Jan.-Feb. 2004.
5. Y. H. Cho and W. H. Mangione-Smith, "A pattern matching coprocessor for network security," in Proc. Des. Autom. Conf., 2005.
6. C. R. Clark and D. E. Schimmel, "Scalable pattern matching for high speed networks," in Proc. IEEE Symp. Field-Programmable Custom Comput. Mach., 2004, pp. 249-257.
7. Z. K. Baker and V. K. Prasanna, "Time and area efficient pattern matching on FPGAs," in Proc. Int. Symp. Field Programmable Gate Arrays, 2004.
8. M. Aldwairi, T. Conte, and P. Franzon, "Configurable string matching hardware for speedup up intrusion detection," in Proc. Workshop on Architectural Support-for Security and Anti-Vims (WASSA) Held in Cooperation With ASPLOS XI, 2004.
9. F. Yu, R. H. Katz, and T. V. Lakshman, "Gigabit rate packet pattern matching with TCAM," in Proc. Int. Conf. Netw. Protocols, Berlin, Germany, Oct. 2004.
10. F. Baboescu, S. Singh, and G. Varghese, "Packet classification for core routers: Is there an alternatives to CAMs?," in Proc. IEEE INFOCOM, 2003.
11. P. Gupta and N. McKeown, "Packet classification using hierarchical intelligent cuttings," in Proc. Hot Interconnects, Aug. 1999.
12. E. Spitznagel, D. Taylor, and J. Turner, "Classification using extended TCAMs," in Proc. IEEE Int. Conf. Netw. Protocols, 2003, pp. 120-131.
13. P. Gupta and N. McKeown, "Algorithms for packet classification, " IEEE Network, vol. 15, no. 2, pp. 24-32, Mar.-Apr. 2001.
14. D. E. Taylor, "Survey taxonomy of packet classification techniques," in Proc. WUCSE-2004-24, Tech. Report, May 2003.
15. F. Zane, G. Narlikar, and A. Basu, "CoolCAMs: Power-efficient TCAMs for forwarding engines," in Proc. INFOCOM, Mar. 2003, pp. 42-52.
16. R. Panigrahy and S. Sharma, "Reducing TCAM power consumption and increasing throughput," in Proc. Hot Interconnects, Aug. 2001, pp. 107-112.
17. K. Zheng, H. Che, Z. Wang, and B. Liu, "An ultra high throughput and power efficient TCAM based IP lookup engine," in Proc. IEEE INFOCOM, 2004, pp. 1984-1994.
18. H. Song and J. W. Lockwood, "Efficient packet classification for network intrusion detection using FPGA," in Proc. Int. Symp. Field Program. Gate Arrays, 2005.
19. V. Srinivasan and G. Varghese, "Faster IP lookups using controlled prefix expansion," in Proc. ACM SIGMETRICS Joint Int. Conf. Measurement Modeling Comput. Syst., 1998.
20. V. Srinivasan, G. Varghese, S. Suri, and M. Waldvogel, "Fast and scalable layer four switching," in Proc. SIGCOMM, Sep. 1998.
21. P. Gupta and N. McKeown, "Packet classification on multiple fields," in Proc. SIGCOMM, Aug. 1999.
22. S. Singh, F. Baboescu, G. Varghese, and J. Wang, "Packet classification using multidimensional cutting," in Proc. SIGCOMM, 2003.
23. P. Crescenzi and V. Kann, A compendium of NP optimization problems." [Online]. Available: http://www.nada.kth.se/~viggo/wwwcom-pendium/node145.html
24. G. Andersson and L. Engebretsen, "Better approximation algorithms and tighter analysis for set splitting and not-all-equal SAT," in Proc. ECCCTR: Electronic Colloquium on Computational Complexity, Technical Reports, 1998.
25. D. S. Johnson, "Approximation algorithms for combinatorial problems," in Proc. 5th Annu. ACM Symp. Theory Comput., 1973.
26. X. Zhao, Y. Ji, and Y. Lei, "A hybrid approach to packet classification," NII Journal, vol. 8, pp. 13-21, 2004.
27. M. Hidell, P. Sjodin, and O. Hagsand, "Router architectures," Tutorial at Networking 2004.
28. M. Kobayashi, T. Murase, and A. Kuriyama, "A longest prefix match search engine for multi-gigabit IP processing," in Proc. Int. Conf. Commun., 2000, pp. 1360-1364.
29. H. Liu, "Conference on measurement and modeling of computer systems," in Proc. Hot Interconnects, 2001.
30. "Measurement & Operations Analysis Team from the National Library for Applied Network Research (NLANR) Project." 2001.
31. P. Gupta, "Address lookup and classification" with modification," in Proc. Stanford EE384Y Class Notes.
32. F. Yu, T.V. Lakshman, M. A. Motoyama, and R. H. Katz, "SSA: A power and memory efficient scheme to multi-match packet classification," in Proc. Symp. Architect. Netw. Commun. Syst., Oct. 2005.