Pipelined architecture for multi-string matching

IEEE Computer Architecture Letters

Volumn 7, Issue 2, 2008, Pages 33-36

  Pao, Derek ^a   Lin, Wei ^a,b   Liu, Bin ^b  

^a CITY UNIVERSITY OF HONG KONG   (Hong Kong)

^b TSINGHUA UNIVERSITY   (China)

Author keywords

Deterministic finite automaton; Network intrusion detection; Pipelined processing; String matching

Indexed keywords

AUTOMATA THEORY; DATA STORAGE EQUIPMENT; FINITE AUTOMATA; HARDWARE; INTERNET; INTRUSION DETECTION; PIPELINES; TRANSLATION (LANGUAGES);

AHO-CORASICK (AC); DETERMINISTIC FINITE AUTOMATON; HARDWARE IMPLEMENTATIONS; LOOK UP TABLE (LUT); MEMORY COST; NETWORK INTRUSION DETECTION; PIPELINED ARCHITECTURES; PIPELINED PROCESSING; STATE GRAPHS; STRING MATCHING; SYSTEM THROUGHPUT;

PIPELINE PROCESSING SYSTEMS;

EID: 58749084322     PISSN: 15566056     EISSN: None     Source Type: Journal    
DOI: 10.1109/L-CA.2008.5     Document Type: Article

References (14)

1. A. V. Aho, M. J. Corasick, "Efficient string matching: an aid to bibliographic search", Comm. of the ACM, Vol. 18, No. 6, pp. 333-340, 1975.
2. M. Alicherry, M. Muthuprasanna, V. Kumar, "High speed matching for network IDS/IPS", IEEE ICNP, pp. 187-196, 2006.
3. Y. H. Cho, W. H. Mangione-Smith, "A pattern matching co-processor for network security", IEEE DAC, pp. 234-239, 2005.
4. S. Dharmapurikar, P. Krishnamurthy, T. S. Sproull, J. W. Lockwood, "Deep packet inspection using parallel Bloom filters", IEEE Micro, pp. 52-61, Jan.-Feb. 2004.
5. V. Dimopoulos, I. Papaefstathiou, D. Pnevmatikatos, "A memory-efficient reconfigurable Aho-Corasick FSM implementation for intrusion detection systems", IEEE IC-SAMOS, pp. 186-193, 2007.
6. J. van Lunteren, "High-performance pattern-matching for intrusion detection", IEEE INFOCOM, pp. 1-13, 2006.
7. G. Papadopoulos, D. Pnevmatikatos, "Hashing + memory = low cost, exact pattern matching ", IEEE Int. Conf. on Field Programmable Logic and Applications, pp. 39-44, 2005.
8. SNORT network intrusion detection system, http://www.snort.org
9. H. Song, T. Sproull, M. Attig, and J. Lockwood, "SNORT offloader: a reconfigurable hardware NIDS filter", IEEE Int. Conf. on Field Programmable Logic and Applications, pp. 493-498, 2005.
10. H. Song, J. W. Lockwood, "Multi-pattern signature matching for hardware network intrusion detection systems", IEEE GLOBECOM, pp. 1686-1690, 2005.
11. I. Sourdis, D. Pnevmatikatos, S. Vassiliadis, "Scalable multigigabit pattern matching for packet inspection", IEEE Trans. on VLSI Systems, Vol. 16, Issue 2, pp. 156-166, Feb. 2008.
12. L. Tan, T. Sherwood, "A high throughput string matching architecture for intrusion detection and prevention", IEEE ISCA, pp. 112-122, 2005.
13. N. Tuck, T. Sherwood, B. Calder, G. Varghese, "Deterministic memory-efficient string matching algorithms for intrusion detection", IEEE INFOCOM, pp. 2628-2639, 2004.
14. F. Yu, R. H. Katz, T. V. Lakshman, "Gigabit rate packet pattern-matching using TCAM", IEEE ICNP, pp. 174-183, 2004.