Aggregated bloom filters for intrusion detection and prevention hardware

GLOBECOM - IEEE Global Telecommunications Conference

Volumn , Issue , 2007, Pages 349-354

  Artan, N Sertac ^a   Sinkar, Kaustubh ^a   Patel, Jalpa ^a   Chao, H Jonathan ^a  

^a POLYTECHNIC UNIVERSITY   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

AGGREGATED BLOOM FILTERS (ABFS); PREVENTION HARDWARE;

COMPUTER HARDWARE; QUERY LANGUAGES; SCALABILITY; STORAGE ALLOCATION (COMPUTER);

INTRUSION DETECTION;

EID: 39349094047     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/GLOCOM.2007.72     Document Type: Conference Paper

References (14)

1. B. Bloom, "Space/time trade-offs in hash coding with allowable errors," Communications of the ACM, vol. 13, no. 7, 1970.
2. N. S. Artan and H. J. Chao, "Design and analysis of a multi-packet signature detection system," Int. J. Security and Networks, vol. 2, no. 1/2, 2007.
3. S.Dharmapurikar, P.Krishnamurthy, T. Sproull, and J. Lockwood, "Deep packet inspection using parallel Bloom Filters," in Symposium on High Performance Interconnects (HotI), Stanford, CA, Aug. 2003, pp. 44-51.
4. O. Erdogan and P. Cao, "Hash-AV: Fast virus signature scanning by cache-resident filters," in IEEE Globecom 2005, St Louis, MO, nov-dec 2005.
5. G. Gu, D. Dagon, X. Qin, M. I. Sharif, W. Lee, and G. F. Riley, "Worm detection, early warning, and response based on local victim information," in In Proceedings of The 20th Annual Computer Security Applications Conference (ACSAC 2004), Tucson, Arizona, Dec. 2004.
6. B. Madhusudan and J. Lockwood, "Design of a system for real-time worm detection," in 12th Annual Proceedings of IEEE Hot Interconnects (HotI-12), Stanford, CA, Aug. 2004.
7. Y. Kim, W Lau, M. C. Chuah, and H. J. Chao, "Packetscore: statistical-based overload control against distributed Denial-of-Service," in 23rd Annual IEEE Conference on Computer Communications (INFOCOM), Hong Kong, Mar. 2004.
8. K. Shanmugasundaram, H. Bronnimann, and N. Memon, "Payload attribution via hierarchical Bloom Filters," in 11th ACM Conference on Computer and Communications Security, Washington, DC, 2004.
9. A. Broder and M. Mitzenmacher, "Network applications of Bloom Filters: A survey," Internet Mathematics, vol. 1, no. 4, pp. 485-509, 2005.
10. T. Kocak and I. Kaya, "Low-power Bloom Filter architecture for deep packet inspection," IEEE Communication Letters, vol. 10, no. March, pp. 210-212, 2006.
11. S. Dharmapurikar, M. Attig, and J. Lockwood, "Design and implementation of a string matching system for network intrusion detection using FPGA-based Bloom Filters," Washington University in St. Louis, Tech. Rep. WUCSE-2004-12, March 2004.
12. H. Song, T. Sproull, M. Attig, and J. Lockwood, "Snort offloader: A reconfigurable hardware NIDS filter," in 15th International Conference on Field Programmable Logic and Applications (FPL 2005), Tampere, Finland, Aug. 2005.
13. Altera FPGAs. [Online]. Available: http://www.altera.com
14. MIT Darpa intrusion detection evaluation. [Online]. Available: http://www.ll.mit.edu/IST/ideval/index.html