Design alternatives for a high-performance self-securing ethernet network interface

Proceedings - 21st International Parallel and Distributed Processing Symposium, IPDPS 2007; Abstracts and CD-ROM

Volumn , Issue , 2007, Pages

  Schuff, Derek L ^a   Pai, Vijay S ^a  

^a PURDUE UNIVERSITY   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

COMPUTER CRIME; ETHERNET; FIELD PROGRAMMABLE GATE ARRAYS (FPGA); HTTP; INTRUSION DETECTION; SERVERS; SOFTWARE DESIGN;

EDGE-BASED APPLIANCES; INTRA-SESSION CONCURRENCY; LAN-BASED ATTACKS; STRING MATCHING;

INTERFACES (COMPUTER);

EID: 34548738932     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/IPDPS.2007.370290     Document Type: Conference Paper

References (35)

1. Adaptec. ANA-7711 Network Accelerator Card Specification, Mar. 2002.
2. A. V. Aho and M. J. Corasick. Efficient String Matching: An Aid to Bibliographic Search. Commun. ACM, 18(6):333340, 1975.
3. M. Aldwairi, T. Conte, and P. Franzon. Configurable string matching hardware for speeding up intrusion detection. SIGARCH Comput. Archit. News, 33(1):99-107, 2005.
4. Alteon Networks. Tigon/PCI Ethernet Controller, Aug. 1997. Revision 1.04.
5. Z. K. Baker and V. K. Prasanna. A Methodology for the Synthesis of Efficient Intrusion Detection Systems on FPGAs. In Proc. of the Twelfth Annual IEEE Symposium on Field Programmable Custom Computing Machines 2004, Apr. 2004.
6. T. Berners-Lee, R. Fielding, and L. Masinter. Uniform Resource Identifiers (URI): Generic Syntax. IETF RFC 2396, Aug. 1998.
7. H. Bos and K. Huang. Toward software-based signature detection for intrusion prevention on the network card. In Proc. of the Eighth International Symposium on Recent Advances in Intrusion Detection, September 2005.
8. R. S. Boyer and J. S. Moore. A Fast String Search Algorithm. Commun. ACM, 20(10):762-772, Oct. 1977.
9. B. C. Brodie, D. E. Taylor, and R. K. Cytron. A scalable architecture for high-throughput regular-expression pattern matching. In ISCA '06: Proceedings of the 33rd International Symposium on Computer Architecture, pages 191202, Washington, DC, USA, 2006. IEEE Computer Society.
10. C. Clark, W. Lee, D. Schimmel, D. Contis, M. Koné, and A. Thomas. A Hardware Platform for Network Intrusion Detection and Prevention. In Proc. of the Third Workshop on Network Processors and Applications, February 2004.
11. G. R. Ganger, G. Economou, and S. M. Bielski. Finding and Containing Enemies Within the Walls with Selfsecuring Network Interfaces. Technical Report CMU-CS03-109, Carnegie Mellon School of Computer Science, Jan. 2003.
12. J. W. Haines, R. P. Lippmann, D. J. Fried, E. Tran, S. Boswell, and M. A. Zissman. 1999 DARPA Intrusion Detection System Evaluation: Design and Procedures. Technical Report 1062, MIT Lincoln Laboratory, 2001.
13. R. N. Horspool. Practical Fast Searching in Strings. Software: Practice and Experience, 10(6):501-506, 1980.
14. Y. Hoskote et al. A TCP Offload Accelerator for 10 Gb/s Ethernet in 90-nm CMOS. IEEE Journal of Solid-State Circuits, 38(11):1866-1875, Nov. 2003.
15. G. S. Johnson, J. Lee, C. A. Burns, and W. R. Mark. The irregular z-buffer: Hardware acceleration for irregular data structures. ACM Transactions on Graphics, 24(4):14621482, 2005.
16. P. Keleher, A. L. Cox, and W. Zwaenepoel. Lazy Release Consistency for Software Distributed Shared Memory. In Proc. of the 19th Annual International Symposium on Computer Architecture, pages 13-21, May 1992.
17. H. Kim, V. S. Pai, and S. Rixner. Improving Web Server Throughput with Network Interface Data Caching. In Proc. of the Tenth International Conference on Architectural Support for Programming Languages and Operating Systems, pages 239-250, October 2002.
18. H. Kim, V. S. Pai, and S. Rixner. Exploiting Task-Level Concurrency in a Programmable Network Interface. In Proc. of the ACM SIGPLAN Symposium on Principles and Practice of Parallel Programming, June 2003.
19. K. Kleinpaste, P. Steenkiste, and B. Zill. Software Support for Outboard Buffering and Checksumming. In Proc. of the ACM SIGCOMM '95 Conference on Applications, Technologies, Architectures, and Protocols for Computer Communication, pages 87-98, Aug. 1995.
20. K. Mackenzie, W. Shi, A. McDonald, and I. Ganev. An Intel IXP1200-based Network Interface. In Proc. of the 2003 Annual Workshop on Novel Uses of Systems Area Networks, Feb. 2003.
21. K. Z. Meth and J. Satran. Design of the iSCSI Protocol. In Proc. of the 20th IEEE Conference on Mass Storage Systems and Technologies, Apr. 2003.
22. Micron. 256Mb: x32 GDDR3 SDRAM MT44H8M32 data sheet, June 2003. Available from www.digchip.com.
23. J. Moscola, J. Lockwood, R. P. Loui, and M. Pachos. Implementation of a Content-Scanning Module for an Internet Firewall. In Proc. of the 11th Annual IEEE Symposium on Field-Programmable Custom Computing Machines, pages 31-38, Apr. 2003.
24. M. Roesch. Snort - Lightweight Intrusion Detection for Networks. In Proc. of the 13th USENIX Conference on System Administration, pages 229-238, 1999.
25. L. Schaelicke, K. Wheeler, and C. Freeland. SPANIDS: A Scalable Network Intrusion Detection Loadbalancer. In Proc. of the 2nd Conference on Computing Frontiers, pages 315-322, 2005.
26. D. Schuff and V. S. Pai. Design alternatives for a highperformance self-securing ethernet network interface. Technical Report TR-ECE-07-02, Purdue University, Jan. 2007.
27. P. Shivam, P. Wyckoff, and D. Panda. EMP: Zero-copy OSbypass NIC-driven Gigabit Ethernet Message Passing. In Proc. of the 2001 ACM/IEEE Conference on Supercomputing, Nov. 2001.
28. I. Sourdis and D. Pnevmatikatos. Fast, Large-Scale String Match for a 10Gbps FPGA-based Network Intrusion Detection System. In Proc. of the 13th International Conference on Field Programmable Logic and Applications, pages 880889, Sept. 2003.
29. L. Tan and T. Sherwood. A High Throughput String Matching Architecture for Intrusion Detection and Prevention. In Proc. of the 32nd Annual International Symposium on Computer Architecture, pages 112-122, June 2005.
30. Top Layer Networks. Network intrusion detection systems: Important IDS network security vulnerabilities. White Paper, September 2002.
31. M. Vachharajani, N. Vachharajani, D. A. Penry, J. A. Blome, and D. I. August. Microarchitectural Exploration with Liberty. In Proc. of the 35th Annual International Symposium on Microarchitecture, pages 271-282, November 2002.
32. P. Willmann, M. Brogioli, and V. S. Pai. Spinach: A LibertyBased Simulator for Programmable Network Interface Architectures. In Proc. of the ACM SIGPLAN/SIGBED 2004 Conference on Languages, Compilers, and Tools for Embedded Systems, pages 20-29, June 2004.
33. P. Willmann, H. Kim, S. Rixner, and V. S. Pai. An Efficient Programmable 10 Gigabit Ethernet Network Interface Card. In Proc. of the 11th International Symposium on HighPerformance Computer Architecture, pages 96-107, February 2005.
34. S. Wu and U. Manber. A fast algorithm for multi-pattern searching. Technical Report TR-94-17, Department of Computer Science, University of Arizona, 1994.
35. F. Yu, R. H. Katz, and T. V. Lakshman. Gigabit Rate Packet Pattern-Matching Using TCAM. In Proc. of the 12th IEEE International Conference on Network Protocols, pages 174-183, Oct. 2004.