Distributed data parallel techniques for content-matching intrusion detection systems

Proceedings - IEEE Military Communications Conference MILCOM

Volumn , Issue , 2007, Pages

  Kopek, Christopher V ^a   Fulp, Errin W ^a   Wheeler, Patrick S ^b  

^a WAKE FOREST UNIVERSITY   (United States)

^b UNIVERSITY OF CALIFORNIA   (United States)

Author keywords

Aho Corasick; Data parallel; Intrusion detection; Packet; Parallel; Signature matching; Snort; Wu Manber

Indexed keywords

CONTENT MATCHING; DISTRIBUTED DATA; FALSE NEGATIVES; INTRUSION DETECTION SYSTEMS (IDSS); OPEN SOURCES; OVER CURRENTS; PARALLEL TECHNIQUES; PROCESSING TIME; SECURITY POLICIES; SIGNATURE BASED NETWORK INTRUSION DETECTION SYSTEM (NIDS); SPEED UPS; TRAFFIC TRACES;

COMPUTER CRIME; INSPECTION; INTERNET; MILITARY COMMUNICATIONS; MILITARY OPERATIONS; PARALLEL PROCESSING SYSTEMS; SECURITY OF DATA; SENSORS; SIGNAL DETECTION; SPEED;

INTRUSION DETECTION;

EID: 47949112917     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/MILCOM.2007.4454922     Document Type: Conference Paper

References (14)

1. Alfred V. Aho and Margaret J. Corasick. Efficient string matching: An aid to bibliographic search. Communications of the ACM, 18(6), June 1975.
2. S. Antonatos K.G. Anagnostakis and E. P. Markatos. Generating realistic workloads for network intrusion detection systems. In Proceedings ACM Workshop on Software and Performance., 2004.
3. Herbert Boss and Kaiming Huang. A network intrusion detection system on ixp1200 network processors with support for large rule sets. http://citeseer.csail.mit.edu/703003.html.
4. Robert S. Boyer and J. Strother Moore. A fast string searching algorithm. Commun. ACM, 20(10):762-772, 1977.
5. Cert. Cert/cc statistics 1988-2006. http://www.cert.org/stats.
6. Richard Cole. Tight bounds on the complexity of the boyermoore string matching algorithm. Symposium on Discrete Algorithms, pages 224-233, 1991.
7. Mike Fisk and George Varghese. Fast content-based packet handling for intrusion detection. Technical report, University of California at San Diego, 2001.
8. C. Kruegel, F. Valeur, G. Vigna, and R. Kemmerer. Stateful intrusion detection for high-speed networks, 2002.
9. Sourcefire. Sourcefire network security. http://www.sourcefire.com/.
10. Sourcefire. Snort Users Manual, December 2006.
11. Patrick Wheeler and Errin W. Fulp. A taxonomy of parallel techniques for intrusion detection. ACMSE 2007, 2007.
12. Patrick Stuart Wheeler. Techniques for improving the performance of signature based intrusion detection systems. Master's thesis, University of California Davis, 2006.
13. Sun Wu and Udi Manber. A fast algorithm for multi-pattern searching. Technical report, University of Arizona, May 1994.
14. Jianming Yu and Jun Li. A parallel nids pattern matching engine and its implementation on network processor. In 2005 International Conference on Security and Management (SAM 2005), 2005.