Applying Cuckoo Hashing for FPGA-based pattern matching in NIDS/NIPS

ICFPT 2007 - International Conference on Field Programmable Technology

Volumn , Issue , 2007, Pages 121-128

  Thinh, Tran Ngoc ^a   Kittitornkun, Surin ^a   Tomiyama, Shigenori ^b  

^a KING MONGKUT'S INSTITUTE OF TECHNOLOGY LADKRABANG   (Thailand)

^b TOKAI UNIVERSITY   (Japan)

Author keywords

[No Author keywords available]

Indexed keywords

COMPUTER PROGRAMMING LANGUAGES; ELECTRON BEAM LITHOGRAPHY; FIELD PROGRAMMABLE GATE ARRAYS (FPGA); HARDWARE; INTERNET; LOGIC DEVICES; STATIC RANDOM ACCESS STORAGE; TECHNOLOGY; THROUGHPUT;

ATTACK PATTERNS; DYNAMIC UPDATING; HARDWARE IMPLEMENTATIONS; HARDWARE UTILIZATION; HIGH THROUGHPUTS; INTERNATIONAL CONFERENCES; LOGIC CELLS; ON-THE-FLY; OPEN-SOURCE NETWORK; PATTERN SETS; PROPOSED ARCHITECTURES; SOFTWARE IMPLEMENTATIONS; SRAM-BASED FPGA; XILINX FPGA; XILINX VIRTEX;

PATTERN MATCHING;

EID: 50149092436     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/FPT.2007.4439240     Document Type: Conference Paper

References (13)

1. SNORT: The Open Source Network Intrusion Detection System. http://www.snort.org
2. R. Pagh, F. F. Rodler, "Cuckoo hashing," Journal of Algorithms, vol 51, 2004, pp. 122-144.
3. J. Moscola, J. Lockwood, R. P. Loui and M. Pachos, "Implementation of a content-scanning module for an internet firewall," the 11th IEEE Symposium on Field-Programmable Custom Computing Machines, 2003, pp.31-38.
4. C. R. Clark and D. E. Schimmel, "Scalable pattern matching for high speed networks," the 12th IEEE Symposium on Field-Programmable Custom Computing Machines, 2004, pp. 249-257.
5. I. Sourdis and D. Pnevmatikatos, "Pre-decoded cams for efficient and high-speed NIDS pattern matching," the 12th IEEE Symposium on Field-Programmable Custom Computing Machines, 2004, pp.258-267.
6. G. Papadopoulos and D. Pnevmatikatos, "Hashing + memory = low cost, exact pattern matching," the 15th International Conference on Field Programmable Logic and Applications (FPL), 2005, pp. 39-44.
7. D. Pnevmatikatos and A. Arelakis, "Variable-length hashing for exact pattern matching," the 16th International Conference on FPL, 2006, pp. 1-6.
8. Y. H. Cho and W. H. M-Smith, "Fast reconfiguring deep packet filter for 1+ gigabit network," IEEE Symposium on Field-Programmable Custom Computing Machines, 2005, pp. 215-224.
9. I. Sourdis, D. Pnevmatikatos, S. Wong and S. Vassiliadis, "A reconfigurable perfect-hashing scheme for packet inspection," the 15th International Conference on FPL, 2005, pp. 644-647.
10. S. Dharmapurikar, P. Krishnamurthy, T. Spoull and J. Lockwood, "Deep Packet Inspection using Bloom Filters," IEEE Hot Interconnects, 2003, pp. 44-51.
11. J. L. Carter and M. N. Wegman, "Universal classes of hash functions," Journal of Computer System Sci., vol. 18, 1979, pp. 143-154.
12. M. V. Ramakrishna and J., Zobel, "Performance Practice of String Hashing Functions," the Fifth International Conference on Database Systems for Advanced Applications, vol. 6, 1997, pp.215-224.
13. Xilinx App. Note, http://www.xilinx.com/bvdocs/appnotes/xapp211.pdf