Self-addressable memory-based FSM: A scalable intrusion detection engine

IEEE Network

Volumn 23, Issue 1, 2009, Pages 14-21

  Soewito, Benfano ^a   Vespa, Lucas ^a   Mahajan, Atul ^a   Weng, Ning ^a   Wang, Haibo ^a  

^a Southern Illinois University Carbondale   (United States)

Author keywords

Decoding; Detectors; Doped fiber amplifiers; Encoding; Engines; Hardware; Memory management

Indexed keywords

ATTACK PATTERNS; DOPED FIBER AMPLIFIERS; ENCODING; FINITE-STATE MACHINES; INCOMING PACKETS; MEMORY EFFICIENCIES; MEMORY MANAGEMENT; MEMORY REQUIREMENTS; NETWORK ATTACKS; NOVEL PATTERNS; PATTERN CHARACTERISTICS; PROCESSING RATES; RE-CONFIGURABLE; STATE MACHINES;

COMPUTER CRIME; CONTOUR FOLLOWERS; DECODING; ENCODING (SYMBOLS); ENGINES; INTRUSION DETECTION;

FIBER AMPLIFIERS;

EID: 65249111553     PISSN: 08908044     EISSN: None     Source Type: Journal    
DOI: 10.1109/MNET.2009.4804319     Document Type: Article

References (13)

1. A. Aho and M. Corasick, "Efficient String Matching: An Aid to Bibliographic Search," Commun. ACM, vol. 18, 1975.
2. B. Commentz-Walter, "A String Matching Algorithm Fast on the Average," Proc. 6th Int'l. Colloquium Automata, Lanquages, and Programming, vol. 71, 1979.
3. S. Wu and U. Manber, "A Fast Algorithm for Multi-Pattern Searching," Tech. Rep. TR9,d- 77, Dept. of Comp. Sci., Univ. of AZ, 1994.
4. K.-K. Tseng et al., "A Parallel Automaton String Matching with Pre-Hashing and Root-Indexing Techniques for Content Filtering Coprocessor," Proc. 2005 IEEE Int'l. Conf. App-Specific Sys., Architecture Processors, 2005, pp. 113-18.
5. S. Dharmapurikar et al., "Deep Packet Inspection Using Parallel Bloom Filters," IEEE Micro, vol. 24, no. 1, Jan. 2004, pp. 52-61.
6. Sourdis et al., "Packet Pre-Filtering for Network Intrusion Detection," Proc. 2006 ACM/IEEE Symp. Architecture for Net. Commun. Sys., pp. 183-92.
7. M. Aldwairi, T. Conte, and P. Franzon, "Configurable String Matching Hardware for Speeding Up Intrusion Detection," SIGARCH Comp. Archit. News, vol. 33, no. 1, 2005, pp. 99-107.
8. Y. H. Cho, S. Navab, and W. H. Mangione-Smith, "Specialized Hardware for Deep Network Packet Filtering," Proc. Reconfigurable Comp. Going Mainstream, 72th Int'l. Conf. Field-Programmable Logic and Applications (FPL'02), 2002, pp. 452-61.
9. Snort, Snort Rule Database, 2007; http://www.snort.org/pubbin/ downloads.cgi
10. N. Tuck et al., "Deterministic Memory-Efficient String Matching Algorithms for Intrusion Detection," Proc. IEEE INFOCOM, 2004, pp. 333-40.
11. J. van Lunteren, "High-Performance Pattern Matching for Intrusion Detection," Proc. INFOCOM '06, 2006, pp. 1-13.
12. L. Tan and T. Sherwood, "A High Throughput String Matching Architecture for Intrusion Detection and Prevention," Proc. 32nd Annual Int'l. Symp. Comp. Architecture, 2005, pp. 112-22.
13. P. Shivakumar and N. P. Jouppi, "CACTI 3.0: An Integrated Cache Timing, Power and Area Model," WRL Research Report 2007-2002, Western Research Lab., tech. rep., Palo Alto, CA, Aug. 2001.