Evaluating GPUs for network packet signature matching

ISPASS 2009 - International Symposium on Performance Analysis of Systems and Software

Volumn , Issue , 2009, Pages 175-184

  Smith, Randy ^a   Goyal, Neelam ^a   Ormont, Justin ^a   Sankaralingam, Karthikeyan ^a   Estan, Cristian ^a  

^a UNIVERSITY OF WISCONSIN MADISON   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

AUXILIARY MEMORY; CONTROL FLOWS; DEEP PACKET INSPECTION; DETERMINISTIC FINITE AUTOMATA; FUNCTIONAL PROTOTYPES; HIGH-PERFORMANCE MICROPROCESSORS; LINE RATE; LOAD-BALANCING; MICRO-ARCHITECTURAL ANALYSIS; MULTIPLE SIGNATURES; NETWORK DEVICES; NETWORK PACKETS; NETWORK SPEED; PACKET LEVEL; PACKET PAYLOADS; PERFORMANCE REQUIREMENTS; SIGNATURE-MATCHING; SIMD PROCESSING; SOFTWARE IMPLEMENTATION; TRAFFIC-SHAPING;

AUTOMATA THEORY; COMPUTER GRAPHICS EQUIPMENT; PROGRAM PROCESSORS; TRANSLATION (LANGUAGES);

INTRUSION DETECTION;

EID: 70349176686     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ISPASS.2009.4919649     Document Type: Conference Paper

References (32)

1. M. Alicherry, M. Muthuprasanna, and V. Kumar. High Speed Pattern Matching for Network IDS/IPS. In ICNP '06. Proceedings of the 2006 14th IEEE International Conference on Network Protocols, pages 187-196, November 2006.
2. D. Bader, V. Agarwal, andK.Madduri. On theDesign andAnalysis of Irregular Algorithms on the Cell Processor: A Case Study of List Ranking. In Parallel and Distributed Processing Symposium, 2007. IPDPS 2007, pages 26-30, March 2007.
3. Z. Baker and V. Prasanna. Automatic Synthesis of Efficient Intrusion Detection Systems on FPGAs. IEEE Transactions on Dependable and Secure Computing, 3:289-300, October 2006.
4. M. Becchi and P. Crowley. An improved algorithm to accelerate regular expression evaluation. In ANCS, December 2007.
5. B. C. Brodie, D. E. Taylor, and R. K. Cytron. A scalable architecture for high-throughput regular-expression pattern matching. In ISCA 2006, pages 191-202, 2006.
6. D. Brumley, J. Newsome, D. Song, H. Wang, and S. Jha. Towards automatic generation of vulnerability-based signatures. In IEEE Symposium on Security and Privacy, Oakland, California, May 2006.
7. J. B. Cabrera, J. Gosar, W. Lee, and R. K. Mehra. On the statistical distribution of processing times in network intrusion detection. In 43rd IEEE Conference on Decision and Control, Dec. 2004.
8. Y. H. Cho and W. H. Mangione-Smith. Deep Packet Filter with Dedicated Logic and Read Only Memories. In 12th Annual IEEE Symposium on Field-Programmable Custom Computing Machines (FCCM'04), pages 125-134, 2004.
9. Cisco intusion prevention system (Cisco IPS). http://www.cisco.com/en/US/ products/ps6634/products-ios-protocol-group-home.html.
10. Clamav: Clam antivirus. Available at http://www.clamav.net/doc/latest/ signatures.pdf.
11. C. Clark and D. Schimmel. Scalable Parallel Pattern Matching on High Speed Networks,. In Proc. 12th Ann. IEEE Symp. Field Programmable Custom Computing Machines (FCCM'04), pages 249-257, 2004.
12. Shader Model 4 (DirectX High Level Shading Language) Available at http://msdn.microsoft.com/en-us/library/bb509635(VS.85).aspx.
13. M. Erez, J. H. Ahn, J. Gummaraju, M. Rosenblum, and W. J. Dally. Executing irregular scientific applications on stream architectures. In ICS 2007, pages 93-104.
14. W. W. L. Fung, I. Sham, G. Yuan, and T. M. Aamodt. Dynamic warp formation and scheduling for efficient gpu control flow. In Proceedings of the 40th Annual IEEE/ACM International Symposium on Microarchitecture, pages 407-420, 2007.
15. B. Hutchings, R. Franklin, , and D. Carver. Assisting Network Intrusion Detection with Reconfigurable Hardware. In 10th Annual IEEE Symposium on Field-Programmable Custom Computing Machines (FCCM'02), pages 111-120, 2002.
16. N. Jacob and C. Brodley. Offloading IDS computation to the GPU. In ACSAC, Dec. 2006.
17. J. A. Kahle,M. N. Day, H. P. Hofstee, C. R. Johns, T. R.Maeurer, and D.Shippy. Introduction to the cell multiprocessor. IBM Journal of Research and Development, 49(4):589-604, July 2005.
18. B. Khailany, W. J. Dally, S. Rixner, U. J. Kapasi, P. Mattson, J. Namkoong, J. D. Owens, B. Towles, and A. Chang. Imagine: Media processing with streams. IEEE Micro, 21(2):35-46, March/April 2001.
19. NVIDIA corporation. Technical Brief: NVIDIA GeForce 8800 GPU Architecture Overview, 2006.
20. NVIDIA corporation. NVIDIA CUDA Programming Guide, 2007. Available at http://developer.nvidia.com.
21. M. Pharr and R. Fernando. GPU Gems 2: Programming Techniques for High-Perf. Graphics and General-Purpose Computation. Addison-Wesley.
22. M. Roesch. Snort - lightweight intrusion detection for networks. In 13th Systems Administration Conference. USENIX, 1999.
23. M. C. Schatz, C. Trapnell, A. L. Delcher, andA. Varshney. Highthroughput sequence alignment using graphics processing units. BMC Bioinformatics 8:474.
24. E. Seamans and T. Alexander. Chapter 35: Fast Virus Signature Matching on the GPU, Gems 3. Editor: Hubert Nguyen. Addison-Wesley Professional.
25. R. Smith, C. Estan, and S. Jha. XFA: Faster signature matching with extended automata. In IEEE Symposium on Security and Privacy, May 2008. Oakland.
26. R. Smith, C. Estan, S. Jha, and S. Kong. Deflating the Big Bang: fast and scalable deep packet inspection with extended finite automata. In SIGCOMM, Aug. 2008.
27. H. Song and J. W. Lockwood. Efficient packet classification for network intrusion detection using fpga. In FPGA '05: Proceedings of the 2005 ACM/SIGDA 13th international symposium on Field-programmable gate arrays, pages 238-245, New York, NY, USA, 2005. ACMPress.
28. L. Tan and T. Sherwood. A high throughput string matching architecture for intrusion detection and prevention. In ISCA 2005, pages 112-122, 2005.
29. Tarari 8000. Online http://www.lsi.com/DistributionSystem/AssetDocument/ documentation/networking/tarari-content-processors/LSI-PB-2pg-GP8000up.pdf.
30. Tarari T10 Technology. Online http://www.lsi.com/DistributionSystem/ AssetDocument/LSI-PB-2pg-T10-Silicon0923.pdf.
31. N. Tuck, T. Sherwood, B. Calder, and G. Varghese. Deterministic Memory-Efficient String Matching Algorithms for Intrusion Detection. In INFOCOM 2004, pages 2628-2639, March 2004.
32. F. Yu, Z. Chen, Y. Diao, T. V. Lakshman, and R. H. Katz. Fast and memory-efficient regular expression matching for deep packet inspection. In ANCS 2006, pages 93-102, 2006.