PERG: A scalable FPGA-based pattern-matching engine with consolidated Bloomier filters

Proceedings of the 2008 International Conference on Field-Programmable Technology, ICFPT 2008

Volumn , Issue , 2008, Pages 73-80

  Ho, Johnny Tsung Lin ^a   Lemieux, Guy G F ^a  

^a UNIVERSITY OF BRITISH COLUMBIA   (Canada)

Author keywords

[No Author keywords available]

Indexed keywords

BLOOMS (METAL); COMPUTER HARDWARE DESCRIPTION LANGUAGES; DISKS (STRUCTURAL COMPONENTS); FIELD PROGRAMMABLE GATE ARRAYS (FPGA); HARDWARE; INTERNET; INTRUSION DETECTION; VIRUSES;

ALIASING; ANTIVIRUS DATABASE; BLOOM FILTERS; CHECKSUM; DISK INTERFACES; EXACT MATCHING; FALSE POSITIVES; FPGA APPLICATIONS; FPGA CHIPS; HARDWARE IMPLEMENTATIONS; HASH TABLES; MEMORY REQUIREMENTS; NETWORK INTRUSION DETECTION SYSTEMS; OFF-CHIP MEMORIES; PATTERN DATABASE; PATTERN MATCHES; PATTERN-MATCHING; SEGMENT LENGTHS;

COMPUTER VIRUSES;

EID: 63049133823     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/FPT.2008.4762368     Document Type: Conference Paper

References (22)

1. What Really Slows Windows Down. http://www.thepcspy.com/read/what-really- slows-windows-down.
2. D. Uluski, M. Moffie, and D. Kaeli, "Characterizing antivirus workload execution," SIGARCH Comp., ACM, 2005, 33, 90-98.
3. Clam Antivirus. http://www.clamav.net.
4. Snort. http://www.snort.org.
5. B. Chazelle, J. Kilian, R. Rubinfeld, and A. Tal, "The Bloomier filter: an efficient data structure for static support lookup tables," Society for Industrial and Applied Mathematics, 2004, 30-39.
6. F. Yu, R. Katz, and T. Lakshman, "Gigabit rate packet pattern-matching using TCAM," IEEE Int'l. Conf. on Network Protocols, 2004, 174-183.
7. R. Sidhu and V. Prasanna, "Fast Regular Expression Matching Using FPGAs," IEEE Symp. on FCCM, 2001, 227-238.
8. A. V. Aho and M. J. Corasick, "Efficient string matching: an aid to bibliographic search," Comm. ACM, 1975, 18, 333-340.
9. J. van Lunteren, "High-performance pattern-matching for intrusion detection," IEEE Int'l. Conf. on Comp. Comm., 2006, 1-13.
10. L. Tan and T. Sherwood, "A high throughput string matching architecture for intrusion detection and prevention," International Symposium on Computer Architecture, 2005, 112-122.
11. N. Tuck, T. Sherwood, B. Calder, and G. Varghese, "Deterministic memory-efficient string matching algorithms for intrusion detection," Proc. INFOCOM 2004, 2004, 4, 2628-2639 vol. 4.
12. B. H. Bloom, "Space/time trade-offs in hash coding with allowable errors," Comm. ACM, 1970, 13, 422-426.
13. S. Dharmapurikar, P. Krishnamurthy, T. Sproull, and J. Lockwood, "Deep packet inspection using parallel Bloom filters," Symposium on High Performance Interconnects, 2003, 44-51.
14. S. Dharmapurikar and J. Lockwood, "Fast and scalable pattern matching for network intrusion detection systems," IEEE Journal on Selected Areas in Communications, 2006, 24, 1781-1792.
15. I. Sourdis, D. Pnevmatikatos, S. Wong, and S. Vassiliadis, "A reconfigurable perfect-hashing scheme for packet inspection," FPL, 2005, 644-647.
16. G. Papadopoulos and D. Pnevmatikatos, "Hashing + memory = low cost, exact pattern matching," Proc. International Conference on Field Programmable Logic and Applications, 2005, 39-4.
17. T. N. Thinh, S. Kittitornkun, and S. Tomiyama, "Applying cuckoo hashing for FPGA-based pattern matching in NIDS/NIPS," ICFPT 2007, 2007, 121-128.
18. X. Zhou, B. Xu, Y. Qi, and J. Li, "MRSI: A fast pattern matching algorithm for anti-virus applications," Int'l. Conf. on Networking, 2008, 256-261.
19. J. Hasan, S. Cadambi, V. Jakkula, and S. Chakradhar, "Chisel: A storage-efficient, collision-free hash-based network processing architecture," Int'l Symp. on Computer Architecture, 2006, 203-215.
20. M. V. Ramakrishna and J. Zobel, "Performance in practice of string hashing functions," Int'l Conf. on Database Systems for Advanced Applications, World Scientific Press, 1997, 215-224.
21. R. Pagh and F. F. Rodler, "Cuckoo hashing," Journal of Algorithms, vol 51, 2004, pp. 122-144.
22. Y. H. Cho and W. H. M-Smith, "Fast reconfiguring deep packet filter for 1+ gigabit network," IEEE Symposium on Field-Programmable Custom Computing Machines, 2005, pp. 215-224.