Super fast hardware string matching+

Proceedings - 2006 IEEE International Conference on Field Programmable Technology, FPT 2006

Volumn , Issue , 2006, Pages 385-388

  Lo, Chia Tien Dan ^a   Tai, Yi Gang ^a   Psarris, Kleanthis ^a   Hwang, Wen Jyi ^b  

^a University of Texas at San Antonio   (United States)

^b NATIONAL TAIWAN NORMAL UNIVERSITY   (Taiwan)

Author keywords

FPGAs; Intrusion detection; Network intrusion detection system; Security; String match algorithm

Indexed keywords

COMPUTER SIMULATION; FIELD PROGRAMMABLE GATE ARRAYS (FPGA); INTRUSION DETECTION; NETWORK MANAGEMENT; NETWORK SECURITY; PACKET NETWORKS;

HARDWARE STRING MATCHING; NETWORK INTRUSION DETECTION SYSTEMS; PARALLEL MATCHING DESIGN; STRING MATCH ALGORITHMS;

COMPUTER HARDWARE;

EID: 43749105567     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/FPT.2006.270354     Document Type: Conference Paper

References (17)

1. A. V. Aho and M. J. Corasick, "Efficient String Matching: An Aid to Bibiliographic Search," Communications of the ACM, Vol. 18, No. 6, June 1975.
2. R. Baeza-Tates and G. H. Gonnet, "A new approach to text searching," Communications of the ACM, Vol. 35, pp. 74-82, 1992.
3. R. Boyer, and S. Moore, "A fast string searching algorithm," Commun. ACM 20, 1977, pp. 762-772.
4. Y. H. Cho, S. Navab, and W. H. Mangione-Smith, "Specialized Hardware for Deep Network Packet Filtering," in the Proc. of 12th INternational Conference on Field Programmable Logic and Applications, 2002, France.
5. M. Gokhale, D. Dubois, A. Dubois, M. Boorman, S. Poole, and V. Hogsett, "Granidt: Towards Gigabit Rate Network Intrusion Detection Technology," in Proc. of 12th International Conference, FPL 2002, France, Los Alamos National Laboratory, 2002.
6. B. L. Hutchings and R. Franklin and D. Carver, "Assisting Network Intrusion Detection with Reconfigurable Hardware," in Porc. of the 10th Annual IEEE Symposium on Field-Programmable Custom Computing Machines (FCCM'02), 2002.
7. A. Levitin, "Introduction to the design & analysis of algorithm," 2nd edition, Pearson Addison Wesley, Boston MA.
8. Chia-Tien Dan Lo, "Hardware-Assisted Network-Based Intrusion Detection," in the International Conference on Informatics, Cybernetics and Systems, December 14-16, 2003, Kaohsiung, Taiwan.
9. Chia-Tien Dan Lo, and Luis Ignacio Ortiz Villasenor, "A New Worm Traffic Generator," in the 2006 South Central Information Security Symposium (SCISS '06), April 21, 2006 in Houston, Texas, USA.
10. MacAfee, Inc., http://www.mcafee.com/us/products/home.htm
11. Huang-Chun Roan, Wen-Jyi Hwang, and Chia-Tien Dan Lo, "Shift-Or Circuit for Efficient Network Intrusion Detection Pattern Matching," in the 16th International Conference on Field Programmable Logic and Applications (FPL 2006), Madrid, SPAIN, August 28-30, 2006, pp. 785 - 790.
12. Huang-Chun Roan, Wen-Jyi Hwang, and Chia-Tien Dan Lo, "Shift-Or Circuit for Efficient Network Intrusion Detection Pattern Matching" in the 2006 International Conference on Embedded and Ubiquitous Computing, Aug. 1-4, Korea.
13. I. Sourdis and D. Pnevmatikatos, "Fast, Large-Scale String Match for a 10Gbps FPGA-based Network Intrusion Detection System," in the 13th International Conference on Field Programmable Logic and Applications (FPL 03), 2003, pp. 880-889.
14. http://www.snort.org/.
15. L. Tan and T. Sherwood, "A High Throughput String Matching Architecture for Intrusion Detection and Prevention," Proceedings of the 32nd International Symposium on Computer Architecture (ISCA'05), pp. 112-122, 2005.
16. N. Tuck, T. Sherwood, B. Calder, and G. Varghese, "Deterministic memory-efficient string matching algorithms for intrusion detection," INFOCOM 2004. Twenty-third AnnualJoint Conference of the IEEE Computer and Communications Societies Volume 4, 7-1.1 March 2004, pp. 2628 - 2639 vol.4, 2004.
17. Xilinx, Inc., "Virtex-II 1.5V Field Programmable Gate Arrays: Advance Product Specification," Xilinx, Inc., San Jose, CA., 2001.