FPGA based string matching for network processing applications

Microprocessors and Microsystems

Volumn 32, Issue 4, 2008, Pages 210-222

  Singaraju, Janardhan ^a   Chandy, John A ^a  

^a UNIVERSITY OF CONNECTICUT   (United States)

Author keywords

FPGA; Network intrusion detection; String lookup cache; String matching

Indexed keywords

COMPUTER HARDWARE; COMPUTER SOFTWARE; INTRUSION DETECTION; RESOURCE ALLOCATION;

DIRECTORY LOOKUP APPLICATIONS; NETWORK INTRUSION DETECTION; STRING LOOKUP CACHE; STRING MATCHING;

FIELD PROGRAMMABLE GATE ARRAYS (FPGA);

EID: 44449147005     PISSN: 01419331     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.micpro.2007.11.001     Document Type: Article

References (31)

1. Karp R.M., and Rabin M.O. Efficient randomized pattern-matching algorithms. IBM Journal of Research and Development 31 2 (1987) 249-260
2. Knuth D.E., Morris J.H., and Pratt V.R. Fast pattern matching in strings. SIAM Journal on Computing 6 2 (1977) 323-350
3. Boyer R.S., and Moore J.S. A fast string searching algorithm. Communications of the ACM 20 10 (1977) 762-772
4. Q. Zhang, R.D. Chamberlain, R.S. Indeck, B.M. West, J. White, Massively parallel data mining using reconfigurable hardware: Approximate string matching, in: Proceedings of Workshop on Massively Parallel Processing, 2004, p. 259a.
5. Baeza-Yates R., and Gonnet G.H. A new approach to text searching. Communications of the ACM 35 10 (1992) 74-82
6. Wu S., and Manber U. A new approach to text searching. Communications of the ACM 35 10 (1992) 83-91
7. R. Sidhu, V.K. Prasanna, Fast regular expression matching using FPGAs, in: Proceedings of IEEE Symposium on Field-Programmable Custom Computing Machines, 2001, pp. 227-238.
8. B.L. Hutchings, R. Franklin, D. Carver, Assisting network intrusion detection with reconfigurable hardware, in: Proceedings of the IEEE Symposium on Field-Programmable Custom Computing Machines, 2002, pp. 111-120.
9. J. Moscola, J. Lockwood, R.P. Loui, M. Pachos, Implementation of a content-scanning module for an internet firewall, in: Proceedings of the IEEE Symposium on Field-Programmable Custom Computing Machines, 2003, pp. 31-38.
10. C. Clark, D. Schimmel, Scalable multi-pattern matching on high-speed networks, in: Proceedings of the IEEE Symposium on Field-Programmable Custom Computing Machines, 2004, pp. 249-257.
11. Mukhopadhyay A. Hardware algorithms for string processing. IEEE Computer (1980) 508-511
12. Motomura M., Toyoura J., Hirata K., Ooka H., Yamada H., and Enomoto T. A 1.2-million transistor, 33 MHz, 20-b dictionary search processor (DISP) ULSI with a 160-kb CAM. IEEE Journal for Solid State Circuits 25 5 (1990) 1158-1164
13. Moors T., and Cantoni A. Cascading content addressable memories. IEEE Micro 12 3 (1992) 56-66
14. A.J. McAuley, P. Francis, Fast routing table lookup using CAMs, in: Proceedings of IEEE INFOCOM, Vol. 3, 1993, pp. 1382-1391.
15. Motomura M., Yamada H., and Enomoto T. A 2 k-word dictionary search processor (DISP) with an approximate word search capability. IEEE Journal for Solid State Circuits 27 6 (1992) 883-891
16. Hirata M., Yamada H., Nagai H., and Takahashi K. A versatile data string-search VLSI. IEEE Journal for Solid State Circuits 23 2 (1988) 329-335
17. Wade J.P., and Sodini C.G. A ternary content addressable search engine. IEEE Journal for Solid State Circuits 24 4 (1989) 1003-1013
18. Music Semiconductors, Implementing an ARP cache using the MUAA CAM family, Tech. Rep. Application Note AN-N23, Princeton, NJ (February 1998).
19. B. Gamache, Z. Pfeffer, S.P. Khatri, A fast ternary CAM design for IP networking applications, in: Proceedings of International Conference on Computer Communications and Networks, 2003, pp. 434-439.
20. M. Roesch, Snort - Lightwieight intrusion detection for networks, in: Proceedings of the USENIX LISA Conference, 1999, pp. 229-238.
21. L. Schaelicke, T. Slabach, B. Moore, C. Freeland, Characterizing the performance of network intrusion detection sensors, in: Proceedings of the International Symposium on Recent Advances in Intrusion Detection, 2003, pp. 155-172.
22. M. Fisk, G. Varghese, Fast content-based packet handling for intrusion detection, Tech. Rep. CS2001-0670, Department of Computer Science, University of California, San Diego, May 2001.
23. C.J. Coit, S. Staniford, J. McAlerney, Towards faster string matching for intrusion detection or exceeding the speed of Snort, in: Proceedings of DARPA Information Survivability Conference and Exposition II, 2001, pp. 367-373.
24. 2 XB: A domain-specific string matching algorithm for intrustion detection, in: Proceedings of IFIP International Information Security Conference, 2003, pp. 217-228.
25. M. Gokhale, D. Dubois, A. Dubois, M. Boorman, S. Poole, V. Hogsett, Granidt: Towards gigabit rate network intrusion detection technology, in: Proceedings of International Conference on Field Programmable Logic and Applications, 2002, pp. 404-413.
26. Y.H. Cho, W.H. Mangione-Smith, Deep packet filter with dedicated logic and read only memories, in: Proceedings of the IEEE Symposium on Field-Programmable Custom Computing Machines, 2004, pp. 125-134.
27. I. Sourdis, D. Pnevmatikatos, Pre-decoded CAMs for efficient and high-speed NIDS pattern matching, in: Proceedings of the IEEE Symposium on Field-Programmable Custom Computing Machines, 2004, pp. 258-267.
28. G. Judge, FPGA architecture ups intrusion detection performance, , September 2003.
29. L. Bu, J.A. Chandy, FPGA based network intrusion detection using content addressable memories, in: Proceedings of IEEE Symposium on Field-Programmable Custom Computing Machines, 2004, pp. 316-317.
30. Z.K. Baker, V.K. Prasanna, A methodology for synthesis of efficient intrusion detection systems on FPGAs, in: Proceedings of the IEEE Symposium on Field-Programmable Custom Computing Machines, 2004, pp. 135-144.
31. Baker Z.K., and Prasanna V.K. Automatic synthesis of efficient intrusion detection systems on FPGAs. IEEE Transactions on Dependable and Secure Computing 3 4 (2006) 289-300