Multi-pattern signature matching for hardware network intrusion detection systems

GLOBECOM - IEEE Global Telecommunications Conference

Volumn 3, Issue , 2005, Pages 1686-1690

  Song, Haoyu ^a   Lockwood, John W ^a  

^a WASHINGTON UNIVERSITY IN ST LOUIS   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

COMPUTER CRIME; COMPUTER HARDWARE; ELECTRONIC DOCUMENT IDENTIFICATION SYSTEMS; INTERNET; PATTERN MATCHING; REAL TIME SYSTEMS;

MALICIOUS ATTACKS; NETWORK INTRUSION DETECTION SYSTEM (NIDS); SIGNATURE MATCHING;

SECURITY OF DATA;

EID: 33846572377     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/GLOCOM.2005.1577937     Document Type: Conference Paper

References (16)

1. Xilinx Inc. Virtex-II Pro and Virtex-II Pro X Platform FPGAs: Complete Data Sheet, 2004.
2. A. Aho and M. J. Corasick. Efficient string matching: An aid to bibliographic search. Communications of the ACM, June 1975.
3. M. Attig, S. Dharmapurikar, and J. Lockwood. Implementation of bloom filters for string matching. In FCCM, 2004.
4. B. Bloom. Space/time trade-offs in hash coding with allowable errors. Communications of the ACM, July 1970.
5. C. J. Coit, S. Staniford, and J. McAlerney. Towards faster pattern matching for intrusion detection or exceeding the speed of snort. In DISCEX II, 2001.
6. S. Dharmapurikar, P. Krishnamurthy, T. Sproull, and J. W. Lockwood. Deep Packet Inspection Using Parallel Bloom Filters. In HotI, 2003.
7. L. Fan, P. Cao, J. Almeida, and A. Broder. Summary cache: a scalable wide-area web cache sharing protocol. IEEE/ACM Transactions on Networking, Mar. 2000.
8. M. Fisk and G. Varghese. Applying fast string matching to intrusion detection, 2004.
9. E. P. Markatos, S. Antonatos, M. Polychronakis, and K. G. Anagnostakis. Exclusion-based signature matching for intrusion detection. In CCN, 2002.
10. J. Moscola, J. Lockwood, R. P. Loui, and M. Pachos. Implementation of a content-scanning module for an Internet firewall. In FCCM, 2003.
11. D. V. Schuehler, J. Moscola, and J. W. Lockwood. Architecture for a Hardware Based, TCP/IP Content Scanning System. In HotI, 2003.
12. R. Sidhu and V. K. Prasanna. Fast regualr expression matching using fpgas. In FCCM, 2001.
13. H. Song and J. Lockwood. Efficient Packet Classification for Network Intrusion Detection Using FPGA. In ACM FPGA, 2005.
14. N. Tuck, T. Sherwood, B. Calder, and G. Varghese. Deterministic memory-efficient string matching algorithms for intrusion detection. In IEEE Infocom, 2004.
15. S. Wu and U. Manber. A fast algorithm for multi-pattern searching. Technical Report TR-94-17, 1994.
16. F. Yu, R. Katz, and T. Lakshman. Gigabit Rate Packet Pattern-Matching Using TCAM.