Efficient packet matching for gigabit network intrusion detection using TCAMs

Proceedings - International Conference on Advanced Information Networking and Applications, AINA

Volumn 1, Issue , 2006, Pages 249-254

  Ming, Gao ^a   Kenong, Zhang ^a   Jiahua, Lu ^a  

^a XI'AN JIAOTONG UNIVERSITY   (China)

Author keywords

[No Author keywords available]

Indexed keywords

BYTES LENGTH; SEARCHING PATTERNS; TERNARY CONTENT-ADDRESSABLE MEMORIES (TCAM);

ASSOCIATIVE STORAGE; COMPUTER ARCHITECTURE; PACKET NETWORKS; PATTERN MATCHING; ROUTERS; SECURITY OF DATA;

COMPUTER NETWORKS;

EID: 33751089862     PISSN: 1550445X     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/AINA.2006.164     Document Type: Conference Paper

References (9)

1. Martin Roesch, "SNORT - lightweight intrusion detection for networks," in LISA '99: USENIX 13th Systems Administration Conference on System administration, Seattle, Washington, Nov. 1999, pp. 229-238.
2. Lambert Schaelicke, Thomas Slabach, Branden Moore et al, "Characterizing the performance of network intrusion detection sensors," Proceedings of the Sixth International Symposium on Recent Advances in Intrusion Detection (RAID 2003), Berlin-Heidelberg-New York, September 2003. Lecture Notes in Computer Science, Springer-Verlag.
3. C.J. Coit, S. Stanford, and J. McAlerney, "Towards Faster String Matching for Intrusion Detection or Exceeding the Speed of Snort", DARPA Information Survivability Conference and Exposition, (DISCEX II'01), 2001.
4. Ioannis Sourdis and Dionisios Pnevmatikatos, "Predecoded CAMs for efficient and high-speed NIDS pattern matching" in IEEE Symposium on Field-Programmable Custom Computing Machines, (FCCM), Napa, CA, Apr. 2004.
5. Christopher R. Clark and David E. Schimmel, "Scalable multi-pattern matching on high-speed networks," IEEE Symposium on Field-Programmable Custom Computing Machines, (FCCM), Napa, CA, Apr. 2004.
6. Y. Cho and W. Mangione-Smith, "Deep packet filter with dedicated logic and read only memories," in IEEE Symposium on Field-Programmable Custom Computing Machines, (FCCM), Napa, CA, Apr. 2004.
7. Michael E. Attig, Sarang Dharmapurikar, and John Lockwood, "Implementation results of Bloom filters for string matching," in IEEE Symposium on Field-Programmable Custom Computing Machines, (FCCM), Napa, CA, Apr. 2004, pp. 322-323.
8. Fang Yu, Randy H. Katz, et al., "Gigabit Rate Packet Pattern-Matching Using TCAM," in IEEE International Conference on Network Protocols, (ICNP), Berlin, Germany, Oct. 2004. pp. 174-183
9. Analog Bits Inc., "High Speed TCAM Datasheet", 2004