A workload for evaluating deep packet inspection architectures

2008 IEEE International Symposium on Workload Characterization, IISWC'08

Volumn , Issue , 2008, Pages 79-89

  Becchi, Michela ^a   Franklin, Mark ^a   Crowley, Patrick ^a  

^a WASHINGTON UNIVERSITY IN ST LOUIS   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

AUTOMATA THEORY; COMPUTER CRIME; COMPUTER NETWORKS; FINITE AUTOMATA; INSPECTION; INTERNET; PACKET NETWORKS; PATTERN MATCHING; SECURITY OF DATA;

CONTENT INSPECTIONS; DEEP PACKET INSPECTIONS; DETERMINISTIC FINITE AUTOMATONS; MATCHING ALGORITHMS; MEMORY LAYOUTS; NETWORK ACTIVITIES; NETWORK INTRUSION DETECTION SYSTEMS; NETWORK TRAFFICS; NETWORKING SYSTEMS; NEW APPLICATIONS; REGULAR EXPRESSIONS; STILL MISSING; TRAFFIC GENERATORS;

INTRUSION DETECTION;

EID: 56449093380     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/IISWC.2008.4636093     Document Type: Conference Paper

References (28)

1. J. E. Hopcroft and J. D. Ullman, "Introduction to Automata Theory, Languages, and Computation", Addison Wesley, 1979.
2. J. Hopcroft, "An nlogn algorithm for minimizing states in a finite automaton", in Theory of Machines and Computation, J. Kohavi, Ed. New York: Academic, 1971, pp. 189-196.
3. A. V. Aho and M. J. Corasick, "Efficient String Matching: An Aid to Bibliographic Search", in Communications of the ACM, 1975.
4. M. Roesch, "Snort: Lightweight Intrusion Detection for Networks", in System Administration Conf., 1999
5. Snort: http://www.Snort.org/
6. Bro: http://bro-ids.org/
7. ClamAV: http://www.clamav.net/
8. Cisco Systems. Cisco ASA 5505. http://www.cisco.com. 2007.
9. Citrix Systems. Citrix Appl. Firewall. http://www.citrix.com. 2007.
10. Vern Paxson et al., "Flex: A fast scanner generator", http://www.gnu.org/software/flex/
11. R. Sommer and V. Paxson, "Enhancing byte-level network intrusion detection signatures with context", in CCS 2003.
12. N. Tuck et al., "Deterministic memory-efficient string matching algorithms for intrusion detection", in Infocom 2004.
13. L. Tan and T. Sherwood, "A High Throughput String Matching Architecture for Intrusion Detection and Prevention", in ISCA 2005.
14. F. Yu et al., "Fast and Memory-Efficient Regular Expression Matching for Deep Packet Inspection", in ANCS 2006
15. S. Kumar et al., "Algorithms to Accelerate Multiple Regular Expressions Matching for Deep Packet Inspection", in ACM SIGCOMM 2006.
16. S. Dharmapurikar and J. Lockwood, "Fast and Scalable Pattern Matching for Content Filtering", in ANCS 2005
17. S. Kumar et al., "HEXA: Compact Data Structures for Faster Packet Processing", in ICNP 2007
18. S. Kumar et al., "Advanced Algorithms for Fast and Scalable Deep Packet Inspection", in ANCS 2006
19. M. Becchi and P. Crowley, "An Improved Algorithm to Accelerate Regular Expression Evaluation", in ANCS 2007
20. M. Becchi and P. Crowley, "A Hybrid Finite Automaton for Practical Deep Packet Inspection", in CoNEXT 2007
21. R. W. Floyd, and J. D. Ullman, "The Compilation of Regular Expressions into Integrated Circuits", in Journal of ACM, vol. 29, 1982.
22. R. Sidhu and V. K. Prasanna, "Fast Regular Expression Matching using FPGAs", in FCCM 2001
23. C.R. Clark and D.Schimmel, "Efficient reconfigurable logic circuit for matching complex network intrusion detection patterns," in FLP 2003.
24. J. Moscola et al., "Implementation of a content-scanning module for an internet firewall," in FCCM 2003.
25. B. Brodie et al., "A Scalable Architecture For High-Throughput Regular-Expression Pattern Matching," in ISCA 2006.
26. C. R. Clark et al., "Modeling the Data-Dependent Performance of Pattern-Matching architectures", in FPGA 2006
27. G. Varghese, "Network Algorithms: An Interdisciplinary Approach to Designing Fast Networked Devices", Morgan Kaufmann, 2004.
28. http://www.tensilica.com