The shunt: An FPGA-based accelerator for network intrusion prevention

ACM/SIGDA International Symposium on Field Programmable Gate Arrays - FPGA

Volumn , Issue , 2007, Pages 199-206

  Weaver, Nicholas ^a   Paxson, Vern ^a   Gonzalez, Jose M ^a  

^a INTERNATIONAL COMPUTER SCIENCE INSTITUTE   (United States)

Author keywords

FPGA; Hardware acceleration; Intrusion detection; NIC

Indexed keywords

ETHERNET; FIELD PROGRAMMABLE GATE ARRAYS (FPGA); NETWORK SECURITY; PROGRAM PROCESSORS; STATIC RANDOM ACCESS STORAGE; TELECOMMUNICATION TRAFFIC;

CACHE MANAGEMENT; HARDWARE ACCELERATION; MALICIOUS TRAFFIC; PACKET HEADER FIELDS;

INTRUSION DETECTION;

EID: 34748922320     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1216919.1216952     Document Type: Conference Paper

References (28)

1. R. Anderson, E. Biham, and L. Knudsen. Serpent: A proposal for the advanced encryption standard. @ @ @ Nick, how published?
2. Michael Attig and John Lockwood. Sift: Snort intrusion filter for tcp. In Hot Interconnects 13, 2005.
3. Burton Bloom. Space/time trade-offs in hash coding with allowable errors. CACM, July 1970.
4. Martin Casado, Tal Garfinkel, Aditya Akella, Michale Freedman, Dan Boneh, and Nick McKeown. SANE: A protection architecture for enterprise networks. In USENIX Security, 2006.
5. Scott Crosby and Dan Wallach. Denial of Service via Algorithmic Complexity Attacks. In Proceedings of the 12th USENIX Security Symposium, August 2003.
6. M. Crovella. Performance evaluation with heavy tailed distributions. In JSSPP '01: Revised Papers from the 7th International Workshop on Job Scheduling Strategies for Parallel Processing, pages 1-10, London, UK, 2001. Springer-Verlag.
7. M. Crovella and A. Bestavros. Self-Similarity in World Wide Web Traffic: Evidence and Possible Causes. In Proceedings of SIGMETRICS'96: The ACMInternational Conference on Measurement and Modeling of Computer Systems., Philadelphia, Pennsylvania, May 1996. Also, in Performance evaluation review, May 1996, 24(1):160-169.
8. The deter security testbed, http://www.deterlab.net.
9. J.M. Gonzalez. Efficient Filtering Support for High-Speed Network Intrusion Detection. PhD thesis, University of California, Berkeley, 2005.
10. National Laboratory for Applied Network Research, Distributed Applications Support Team, Iperf, the TCP/UDP Bandwidth Measurement Tool. http://dast.nlanr.net/projects/iperf/.
11. R. Morris, E. Kohler, J. Jannotti, and M. Frans Kaashoek. The Click modular router. In Symposium on Operating Systems Principles, pages 217-231, 1999.
12. Nicholas Weaver and Stuart Staniford and Vern Paxson. Very fast containment of scanning worms. In 13th USENIX Security Symposium. USENTX, August 2004.
13. V. Paxson. Empirically derived analytic models of wide-area TCP connections. IEEE/ACM Transactions on Networking, 2(4):316-336, 1994.
14. V. Paxson and S. Floyd. Wide area traffic: The failure of Poisson modeling. IEEE/ACM Transactions on Networking, 3(3):226-244, 1995.
15. Ronald L. Rivest. The RC5 encryption algorithm, from Dr. Dobb's Journal, January, 1995, 1996.
16. Ronald L. Rivest, M. J. B. Robshaw, R. Sidney, and Y. L. Yin. The RC6 block cipher. @ @ @ Nick, how published?
17. Lambert Schaelicke, Kyle Wheeler, and Curt Freeland. SPANIDS: A scalable network intrusion detection loadbalancer. In Proceedings of Computing Frontiers, 2005.
18. David Schuehler and John Lockwood. A modular system for fpga-based tcp flow processing in high-speed networks. In FPL, 2004.
19. Andre Seznec. A case for two-way skewed-associative caches. In ISCA, pages 169-178, 1993.
20. Haoyu Song, Sarang Dharmapurikar, Jonathan Turner, and John Lockwood. Fast hash table lookup using extended Bloom filter: An aid to network processing. In SIGCOMM, 2005.
21. Haoyu Song and John Lockwood. Efficient packet classification for network intrusion detection using fpga. In ACM Symposium on Field Programmable Gate Arrays, 2005.
22. Haoyu Song, Todd Sproull, Mike Attig, and John Lockwood. Snort offloader: A reconfigurable hardware NIDS filter.
23. Ioannis Sourdis and Dionisios Pnevmatikatos. Fast, large-scale string match for a 10 Gbps FPGA-based network intrusion detection system.
24. Greg Watson, Nick McKeown, and Martin Casado. Netfpga: A tool for network research and education. In 2nd workshop on Architectural Research using FPGA Platforms (WARFP), 2006.
25. Nicholas Weaver, Dan Ellis, Stuart Staniford, and Vern Paxson. Worms verses perimiters: The case for Hard LANs. In Hot Interconnects 12, August 2004.
26. Nicholas Weaver, Vern Paxson, and Robin Sommer. Bro-LAN pervasive network inspection and control for LAN traffic. Work in progress, 2006.
27. W. Wilinger, V. Paxson, and M. Taqqu. Self-similarity and heavy tails: Structural modeling of network traffic. In R. Adler, R. Feldman, and M. Taqqu, editors, A Practical Guide To Heavy Tails: Statistical Techniques and Techniques. Birkhauser, 1998.
28. W. Willinger, M. Taqqu, R. Sherman, and D. Wilson. Self-similarity through high-variability: Statistical analysis of Ethernet LAN traffic at the source level. IEEE/ACM Transactions on Networking, 5:71-86, 1997.