A multi-dimension rule update in a TCAM-based high-performance network security system

Proceedings - International Conference on Advanced Information Networking and Applications, AINA

Volumn 2, Issue , 2006, Pages 62-66

  Jeong, Hae Jin ^a   Song, Il Seop ^a   Lee, Yoo Kyoung ^b   Kwon, Taeck Geun ^a  

^a Chungnam National University   (South Korea)

^b Electronics and Telecommunications Research Institute (ETRI)   (South Korea)

Author keywords

[No Author keywords available]

Indexed keywords

ALGORITHMS; CLASSIFICATION (OF INFORMATION); PACKET NETWORKS; PATTERN MATCHING; TELECOMMUNICATION NETWORKS; TELECOMMUNICATION TRAFFIC;

GIGABIT ETHERNET (GBE); HIGH PERFORMANCE PACKET CLASSIFICATION; INTRUSION PREVENTION SYSTEM (IPS); NETWORK SECURITY SYSTEMS;

SECURITY SYSTEMS;

EID: 33751119325     PISSN: 1550445X     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/AINA.2006.37     Document Type: Conference Paper

References (13)

1. F. Baboescu, S. Singh, and G. Varghese, "Packet Classification for Core Routers: Is There an Alternative to CAMs?," IEEE INFOCOM, Mar. 2003.
2. D. Shahand and P. Gupta, "Fast Incremental Updates on Ternary-CAMs for Routing Lookups and Packet Classification," Proc. Hot Interconnects, Mar. 2000.
3. IDT, Network Search Engine (NSE) with QDR Interface, http://www.idt.com/.
4. Z. Wang, H. Che, M. Kumar, and S. K. Das, "Consistent TCAM Policy Table Update with Zero Impact on Data Path Processing," IEEE Computer, Dec. 2004, vol. 53, no. 12, pp. 1602-1614.
5. T. Lakshman and D. Stidialis. "High speed Policy-based Packet Forwarding using Efficient Multi-dimensional Range Matching," Proc. ACM SIGCOMM, Sep. 1998.
6. P. Gupta, S. Lin, and N. McKeown, "Routing Lookup in Hardware at Memory Access Speeds," Proc. INFORCOM, Mar. 1998, pp. 1240-1247.
7. A. Brodnik, S. Carlsson, M. Degermark, and S. Pink, " Small Forwarding Tables for Fast Routing Lookups," Proc. ACM SIGCOMM, Oct. 1997, pp. 3-13.
8. M. Waldvogel, G Varghese, J. Turner, and B. Plattner, "Scalable High-speed IP Routing Lookups," Proc. ACM SIGCOMM, Oct. 1997, pp. 25-36.
9. P. Gupta and N. McKeown, "Classifying Packets Using Hierarchical Intelligent Cuttings," IEEE Micro, vol. 20, no. 1, Jan-Feb 2000, pp. 34-41.
10. P. Gupta and N. McKeown, "Packet Classification on Multiple Fields," Proc. ACM SIGCOMM, Sept. 1997, pp. 147-160.
11. B. Lampson, V. Srinivasan, and G. Varghese, "IP Lookups Using Multiway and Multicolumn Search," Proc. INFOCOM, Mar. 1998, pp. 1248-1256.
12. M. Buddhikot, S. Suri, and M. Waldvogel, "Space Decomposition Techniques for Fast Layer-4 Switching," Protocols for High-Speed Networks, vol. 66, no. 6, Aug. 1999, pp. 277-283.
13. V. Srinivasan, G. Varghese, S. Suri, and M. Waldvogel, "Scalable Level 4 Switching and Fast Firewall Processing," Proc. ACM SIGCOMM, Sep. 1998, pp. 203-214.