Over 10Gbps string matching mechanism for multi-stream packet scanning systems

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 3203, Issue , 2004, Pages 484-493

  Sugawara, Yutaka ^a   Inaba, Mary ^a   Hiraki, Kei ^a  

^a UNIVERSITY OF TOKYO   (Japan)

Author keywords

[No Author keywords available]

Indexed keywords

ARTIFICIAL INTELLIGENCE; COMPUTERS;

HIGH THROUGHPUT; MULTI-STREAM; RULE SET; SCANNING SYSTEMS; STRING MATCHING;

FIELD PROGRAMMABLE GATE ARRAYS (FPGA);

EID: 34547568344     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/978-3-540-30117-2_50     Document Type: Article

References (14)

1. C. J. Coit, S. Staniford, J. McAlerney: Towards Faster String Matching for Intrusion Detection or Exceeding the Speed of Snort. In: DISCEXII, DARPA Information Survivability conference and Exposition. (2001)
2. Y. H. Cho, S. Navab, W. H. Mangione-Smith: Specialized Hardware for Deep Network Packet Filtering. In: Proc. of 12th Intl. Conf. on Field Programmable Logic and Applications(FPL '02). (2002)
3. I. Sourdis, D. Pnevmatikatos: Fast, Large-Scale String Match for a 10Gbps FPGAbased Network Intrusion Detection System. In: Proc. of 13th Intl. Conf. on Field Programmable Logic and Applications(FPL '03). (2003)
4. M. Gokhale, D. Dubois, A. Dubois, M. Boorman, S. Poole, V. Hogsett: Granidt: Towards Gigabit Rate Network Intrusion Detection Technology. In: Proc. of 12th Intl. Conf. on Field Programmable Logic and Applications(FPL '02). (2002)
5. R. Sidhu, V. K. Prasanna: Fast regular expression matching using fpgas. In: Proc. of 9th IEEE Symp. on Field-Programmable Custom Computing Machines (FCCM'01). (2001)
6. B. L. Hutchings, R. Franklin, D. Carver: Assisting network intrusion detection with reconfigurable hardware. In: Proc. of 10 th Annual IEEE Symp. on Field-Programmable Custom Computing Machines (FCCM'02). (2002) 111-120
7. C. Clark, D. Schimmel: Scalable pattern matching for high speed networks. In: Proc. of 12th IEEE Symp. on Field-Programmable Custom Computing Machines (FCCM'04). (2004)
8. J. Moscola, J. Lockwood, R. P. Loui, M. Pachos: Implementation of a content-scanning module for an internet firewall. In: Proc. of 11th Annual IEEE Symp. on Field-Programmable Custom Computing Machines (FCCM'03). (2003) 31-38
9. S. Dharmapurikar, P. Krishnamurthy, T. Sproull, J. Lockwood: Deep packet inspection using parallel bloom filters. In: Proc. of 11th IEEE Symp. on High Performance Interconnects (HotI '03). (2003) 44-51
10. Z. K. Baker, V. K. Prasanna: Time and Area Efficient Pattern Matching on FP-GAs. In: Proc. of the 2004 ACM/SIGDA 12th Intl. Symp. on Field programmable gate arrays(FPGA'04). (2004) 223-232
11. A. V. Aho, M. J. Corasick: Efficient String Matching : An Aid to Bibliographic Search. Communications of the ACM Vol. 18 (1975) 333-340
12. M. Handley, V. Paxson: Network Intrusion Detection : Evasion, Traffic Normalization, and End-to-End Protocol Semantics. In: Proc. of 10th USENIX Security Symposium. (2001)
13. M. Roesch: Snort - Lightweight Intrusion Detection for Networks. In: Proc. of Lisa'99: 13th Administration Conference. (1999)
14. Y. Sugawara: Correctness Proof of the SBT method. Technical report, Dept. of Computer, Science, Univ. of Tokyo (2004)