Fast and memory-efficient regular expression matching for deep packet inspection

ANCS 2006 - Proceedings of the 2006 ACM/IEEE Symposium on Architectures for Networking and Communications Systems

Volumn , Issue , 2006, Pages 93-102

  Yu, Fang ^a   Chen, Zhifeng ^b   Diao, Yanlei ^c   Lakshman, T V ^d   Katz, Randy H ^a  

^a UNIVERSITY OF CALIFORNIA   (United States)

^b GOOGLE INC   (United States)

^c UNIVERSITY OF MASSACHUSETTS   (United States)

^d LUCENT TECHNOLOGIES   (United States)

Author keywords

Deep packet inspection; DFA; Intrusion detection; Regular expressions

Indexed keywords

CONTENT SCANNING; DEEP PACKET INSPECTION; NETWORK MONITORING; REGULAR EXPRESSIONS;

HTTP; IMAGE MATCHING; INTRUSION DETECTION; RESOURCE ALLOCATION; SEARCH ENGINES; TELECOMMUNICATION TRAFFIC;

PACKET NETWORKS;

EID: 34547662263     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1185347.1185360     Document Type: Conference Paper

References (28)

1. J. Levandoski, E. Sommer, and M. Strait, "Application Layer Packet Classifier for Linux." http://17-filter.sourceforge.net/.
2. "SNORT Network Intrusion Detection System." http://www.snort.org.
3. "Bro Intrusion Detection System." http://bro-ids.org/Ovcrvicw. html.
4. L. Tan and T. Sherwood, "A High Throughput String Matching Architecture for Intrusion Detection and Prevention," Proc. LISA, 2005.
5. Y. Cho and W. Mangione-Smith, "Deep packet filter with dedicated logic and read only memories," Proc. FCCM, 2004.
6. Z. K. Baker and V. K. Prasanna, "Time and area efficient pattern matching on FPGAs," Proc. FPGAs, 2004.
7. Z. K. Baker and V. K. Prasanna, "A methodology for synthesis of efficient intrusion detection systems on FPGAs.," Proc. FCCM, 2004.
8. M. Aldwairi, T. Conte, and P. Franzon, "Configurable string matching hardware for speedup up intrusion detection," Proc. WASSA, 2004.
9. S. Dharmapurikar, M. Attig, and J. Lockwood, "Deep packet inspection using parallel bloom filters," IEEE Micro, 2004.
10. F. Yu, R. H. Katz, and T. V. Lakshman, "Gigabit Rate Packet Pattern Matching with TCAM," Proc. ICNP, 2004.
11. Y. H. Cho and W. H. MangioneSmith, "A Pattern Matching Coprocessor for Network Security," Proc. DAC, 2005.
12. T. J. Green, A. Gupta, G. Miklau, M. Onizuka, and D. Suciu, "Processing XML Streams with Deterministic Automata and Stream Indexes," ACM TODS, vol. 29, 2004.
13. Y. Diao, M. Altinel, M. J. Franklin, H. Zhang, and P. Fischer, "Path Sharing and Predicate Evaluation for High-Performance XML Filtering," ACM TODS, 2003.
14. J. E. Hopcroft, R. Motwani, and J. D. Ullman, Introduction to Automata Theory, Languages, and Computation, Addison Wesley, 2001.
15. R. Sommer and V. Paxson, "Enhancing Byte-Level Network Intrusion Detection Signatures with Context," Proc. CCS, 2003.
16. J. Moscola, J. Lockwood, R. P. Loui, and Michael Pachos, "Implementation of a Content-Scanning Module for an Internet Firewall," Proc. FCCM, 2003.
17. R. Sidhu and V. K. Prasanna, "Fast regular expression matching using FPGAs," Proc. FCCM, 2001.
18. R. Franklin, D. Carver, and B. Hutchings, "Assisting network intrusion detection with reconfigurable hardware," Proc. FCCM, 2002.
19. C. R. Clark and D. E. Schimmel, "Scalable pattern matching for high speed networks," Proc FCCM, 2004.
20. S. Kumar, S. Dharmapurikar, F. Yu, P. Crowley, J. Turner., "Algorithms to accelerate Multiple Regular Expression Matching for Deep Packet Inspection," ACM Sigcomm 2006.
21. "Standard for Information Technology, Portable Operating System Interface (POSIX)," Portable Applications Standards Committee of IEEE Computer Society and the Open Group.
22. C. L. A. Clarke and G. V. Cormack, "On the use of regular expressions for searching text," Technical Report CS-95-07, Department of Computer Science, University of Waterloo, 1995.
23. J. A. Kahle, M. N. Day, H. P. Hofstee, C. R. Johns, T. R. Maeurer, and D. Shippy, "Introduction to the Cell multiprocessor," IBM J. RES. & DEV., vol. 49, JULY/SEPTEMBER 2005.
24. "MIT DARPA Intrusion Detection Data Sets." http://www.ll.mit. edu/IST/ideval/data/2000/2000_data_index.html.
25. V. Paxson et al., "Flex: A fast scanner generator." http://www.gnu.org/software/flex/.
26. Perl compatible Regular Expression, http://www.pcrc.org/
27. F. Yu, Z. Chen, Y. Diao, T. V. Lakshman and R. H. Katz, " Fast and Memory-Efficient Regular Expression Matching for Deep Packet Inspection," UC Berkeley technical report, May 2006.
28. B. C. Brodie, R. K. Cytron, and D. E. Taylor, "A Scalable Architecture for High-Throughput Regular-Expression Pattern Matching," ISCA 2006.