Offloading IDS computation to the GPU

Proceedings - Annual Computer Security Applications Conference, ACSAC

Volumn , Issue , 2006, Pages 371-380

  Jacob, Nigel ^a   Brodley, Carla ^a  

^a Tufts University   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

GRAPHICS PROCESSING UNIT (GPU); NON-GRAPHICAL COMPUTING; PIXELSNORT'S;

COMPUTATION THEORY; ELECTRONIC DOCUMENT IDENTIFICATION SYSTEMS; PROGRAM PROCESSORS;

INTRUSION DETECTION;

EID: 39049126577     PISSN: 10639527     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ACSAC.2006.35     Document Type: Conference Paper

References (39)

1. "Snort Intrusion Detection System," http://www.snort.org/
2. S.A. Wallach and D.S. Wallach, "Denial of Service via Algorithmic Complexity Attacks", Usenix Security 2003
3. R.S. Boyer and J.S. Moore, "A fast string searching algorithm," Communications of the ACM 20, pages 762-772, 1977.
4. A.V. Aho and M.J. Corasick, "Efficient String Matching: An aid to bibliographic search," Communications of the ACM, pages 333-340, 1975.
5. W. Fenner, G. Harris and M. Richardson, "TCPDump," http://www.tcpdump.org/
6. T.H. Ptacek and T. N. Newsham, "Insertion, evasion and denial of service: Eluding Network Intrusion Detection," Technical report, Securenetworks.com, January 1998.
7. G. Torres, "GeForce 7800 GTX Launch Coverage" http://www.hardwaresecrets.com/article/156
8. Intel Pentium 4 Xeon, http://www.top500.org/
9. I. Buck, T. Foley, D. Horn, J. Sugerman, P. Hanrahan, M. Houston and K. Fatahalian, "BrookGPU," http://graphics.stanford.edu/projects/ brookgpu/
10. OpenGL, http://www.opengl.org/
11. Cg, http://developer.nvidia.com/page/cg_main.html
12. GLSL, http://www.opengl.org/documentation/oglsl.html
13. AGP, http://www.devhardware.com/c/a/Video-Cards/AGP8X-A-Closer-Look/
14. D. E. Knuth, J. H. Morris, Jr., and V. R. Pratt, "Fast pattern matching in strings," SIAM J. Computing 6, 323-350, 1977.
15. DefCon Capture The Flag, http://www.shmoo.com/cctf/ctl.shtml
16. A. Jalote, T.N. Vijaykumar and C.E. Brodley, "Advanced Memory Optimizations for String Matching in Intrusion Detection Systems," Purdue University Technical Report, 2004.
17. H. Debar, M. Dacier and A. Wespi, "Towards a Taxonomy of Intrusion-Detection Systems," Computer Networks, Vol. 31, No. 8, 23, pp. 805-822, 1999.
18. M.J. Ranum, "Experiences Benchmarking Intrusion Detection Systems," NFR Security White Paper, December, 2001.
19. Contest, http://members.optusnet.com.au/ckolivas/contest/
20. LMBench, http://www.bitmover.com/lmbench/
21. DBench, http://www.dbench.org/home/index.php
22. Linux Test Project, http://sourceforge.net/projects/ltp/
23. ISIC - IP Stack Integrity Checker, http://www.packetfactory.net/Projects/ ISIC/
24. R. Lippmann, J.W. Haines, D.J. Fried, J. Korba and K. Das, "The 1999 DARPA Off-Line Intrusion Detection Evaluation," Computer Networks, pp. 579-595, 2000.
25. L. Schaelicke, T. Slabach, B. Moore and C. Freeland, "Characterizing the Performance of Network Intrusion Detection Sensors," Recent Advances in Intrusion Detection: 6th International Symposium, RAID 2003, Pittsburgh, PA, USA, September 8-10, 2003.
26. D. Banks and M. Prudence, "A High-performance Network Architecture for a PA-RISC Workstation," IEEE Journal on Selected Areas in Communications, vol. 11, no. 2, pp. 191-202, Feb. 1993.
27. - D. Clark, V. Jacobson, J, Romkey and M. Salwen, "An Analysis of TCP Processing Overhead," IEEE Communications Magazine, vol. 27, pp. 23-29, June 1989.
28. J. Coit, S. Staniford, J. McAlerney, "Towards Faster String Matching for Intrusion Detection or Exceeding the Speed of Snort," Proc. DARPA Information Survivability Conference and Exposition (DISCEX II 702), IEEE CS Press, Los Alamitos, Calif., pp. 367-373, 2001.
29. K. G. Anagnostakis, S. Antonatos, E. P. Markatos and M. Polychronakis, "A Domain-Specific String Matching Algorithm for Intrusion Detection," Proceedings of the 18th IFIP International Information Security Conference, pp. 217-228, 2003.
30. C. Giovanni, "Fun With Packets: Designing a Stick. Draft White Paper on Stick," http://www.eurocompton.net/stick/
31. SNOT Discussion on Security Focus IDS Mailing List, http://www. securityfocus.com/ids
32. S. Patton, W. Yurcik, D. Doss, "An Achilles? Heel in Signature-Based IDS: Squealing False Positives in Snort," Proceedings of RAID, pp. 95-114, 2001.
33. Jesse D. Hall John C. Hart, "GPU Acceleration of Iterative Clustering," The ACM Workshop on General Purpose Computing on Graphics Processors, pp. 45-52, 2004.
34. NK Govindaraju, B Lloyd, W Wang, M Lin, D Manocha, "Fast Computation of Database Operations using Graphics Processors," Proceedings of the 2004 ACM SIGMOD Conference, pp. 77-86, 2004.
35. MJ Harris, G Coombe, T Scheuermann, A Lastra, "Physically-based visual simulation on graphics hardware," SIGGRAPH/Eurographics Workshop on Graphics Hardware, pp. 45-53, 2002
36. J. C. Rabek, R. I. Khazan, S. M. Lewandowski, R. K. Cunningham, "Detection of Injected, Dynamically Generated, and Obfuscated Malicious Code," Proceedings of the 2003 ACM Workshop on Rapid Malcode, pp. 231-241, Oct. 2003
37. Puma Processor, http://www.ubinetics.com
38. Lynx Processor, http://www.eonic.com/processingplatforms/lynxsar.html
39. Tiger Processor, http://www.us.designreuse.com/news/news10176.html