Approximate packet pre-filtering to accelerate pattern matching

Proceedings of the 2008 International Conference on Security and Management, SAM 2008

Volumn , Issue , 2008, Pages 203-209

  Soewito, Benfano ^a   Weng, Ning ^a  

^a Southern Illinois University Carbondale   (United States)

Author keywords

And system optimization; Intrusion detection system; Network security; Pattern matching; Signature recognition systems

Indexed keywords

AND SYSTEM OPTIMIZATION; EXACT-PATTERN MATCHING; FALSE NEGATIVES; FALSE POSITIVE RATES; FAST PATHS; INCOMING PACKETS; INTERNET SECURITIES; INTRUSION DETECTION SYSTEM; PACKET-BASED; PRE-FILTERING; PREFILTER; SIGNATURE RECOGNITION SYSTEMS; SYSTEM THROUGHPUTS;

COMPUTER CRIME; IMAGE CODING; INTERNET; INTRUSION DETECTION; NETWORK SECURITY; PATTERN MATCHING;

PATTERN RECOGNITION SYSTEMS;

EID: 62749195236     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (20)

1. A. Aho and M. Corasick. Efficient string matching: An aid to bibliographic search. Communications of the ACM, 18, 1975.
2. M. Aldwairi, T. Conte, and P. Franzon. Configurable string matching hardware for speeding up intrusion detection. SIGARCH Computer Architecture News, pages 99-107, 2005.
3. M. Attig and J. Lockwood. Sift: Snort intrusion filter for tcp. In In Proceedings of 13th Symposium on High Performance Interconnects, pages 121-127, 2005.
4. R. S. Boyer and J. S. Moore. A fast string searching algorithm. Communication of the ACM, 20(10):762-772, 1977.
5. L. Bu and J. A. Chandy. Fpga based network intrusion detection using content addressable memories. In FCCM '04: Proceedings of the 12th Annual IEEE Symposium on Field- Programmable Custom Computing Machines, pages 316-317, Washington, DC, USA, 2004. IEEE Computer Society.
6. B. Commentz-Walter. A string matching algorithm fast on the average. In Proc. of the 6th International Colloquium on Automata, Languages and Programming, volume 71, 1979.
7. S. Dharmapurikar, P. Krishnamurthy, T. Sproull, and J. Lockwood. Deep packet inspection using parallel bloom filters. IEEE Micro, 24(1):52-61, Jan. 2004.
8. R.-T. Liu, N.-F. Huang, C.-H. Chen, and C.-N. Kao. A fast string-matching algorithm for network processor-based intrusion detection system. Trans. On Embedded Computing Sys, 3(3):614-633, 2004.
9. P. Piyachon and Y. Luo. Effcient memory utilization on network processors for deep packet inspection. In InANCS '06: Proceedings of the 2006 ACM/IEEE symposium on Architecture for networking and communications systems, pages 71-80, New York, NY, USA, 2006. ACM Press.
10. R. Ramaswamy, L. Kencl, and G. Iannaccone. Approximate fingerprinting to accelerate pattern matching. In In IMC '06: Internet Measurement Conference, 2006.
11. R. Ramaswamy and T. Wolf. PacketBench: A tool for workload characterization of network processing. In Proc. of IEEE 6th Annual Workshop on Workload Characterization (WWC-6), pages 42-50, Austin, TX, Oct. 2003.
12. M. Roesch. Snort - lightweight intrusion detection for networks. In Proc. of the 13th Systems Administration Conference, 1999.
13. The Shmoo Group. Capture the Capture the Flag Data: Defcon10. http://cctf.shmoo.com/.http://cctf.shmoo.com/.
14. H. Song and J. W. Lockwood. Efficient packet classification for network intrusion detection using fpga. In FPGA '05: Proceedings of the 2005 ACM/SIGDA 13th international symposium on Field-programmable gate arrays, pages 238-245, New York, NY, USA, 2005. ACM Press.
15. P. Sourdis, V. Dimopoulos, D. Pnevmatikatos, and S. Vas- siliadis. Packet pre-filtering for network intrusion detection. In In ANCS '06: Proceedings of the 2006 ACM/IEEE Symposium on architecture for networking and communications systems, pages 183-192, New York, NY, USA, 2006. ACM Press.
16. Y. Sugawara, M. Inaba, , and K. Hiraki. Over 10gbps string matching mechanism for multi-stream packet scanning systems. In Lecture Notes in Computer Science, volume 3203, pages 484-493. Springer-Verlag, 2004.
17. N. Tuck, T. Sherwood, B. Calder, and G. Varghese. Deterministic memory-efficient string matching algorithms for intrusion detection. In Proc. ofthe IEEE Infocom Conference, 2004.
18. G. Varghese. Network Algorithmics: An Interdisciplinary Approach to Designing Fast Networked Devices. Morgan Kaufmann, 1st edition, 2005.
19. S. Wu and Manber. A fast algorithm for multi-pattern searching. Technical Report TR94-17, Department of Computer Science, University of Arizona, 1994.
20. F. Yu, R. H. Katz, and T. V. Lakshman. Gigabit rate packet pattern-matching using tcam. In ICNP '04: Proceedings of the Network Protocols, 12th IEEE International Conference on (ICNP'04), pages 174-183, Washington, DC, USA, 2004. IEEE Computer Society.