A hybrid parallel signature matching model for network security applications using SIMD GPU

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 5737 LNCS, Issue , 2009, Pages 191-204

  Wu, Chengkun ^a   Yin, Jianping ^a   Cai, Zhiping ^a   Zhu, En ^a   Chen, Jieren ^a  

^a NATIONAL UNIVERSITY OF DEFENSE TECHNOLOGY   (China)

Author keywords

GPU; Network security; Parallel model; Signature matching

Indexed keywords

GPU; IN-NETWORK; LOAD-BALANCING; MANY-CORE; PARALLEL MODEL; PARTITION METHODS; PATTERN SET; SECURITY APPLICATION; SIGNATURE MATCHING;

COMPUTER GRAPHICS EQUIPMENT; INTERNET;

NETWORK SECURITY;

EID: 70350678822     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/978-3-642-03644-6_15     Document Type: Conference Paper

References (16)

1. Antonatos, S., Anagnostakis, K.G., Markatos, E.P.: Generating realistic workloads for network intrusion detection systems. In: ACM SIGSOFT Software Engineering Notes, vol. 29, pp. 207-215 (2004)
2. Tuck, N., Sherwood, T., Calder, B., Varghese, G.: Deterministic memory-efficient string matching algorithms for intrusion detection. In: Proc. of INFOCOM, vol. 4, pp. 2628-2639 (2004)
3. Clark, C.R., Schimmel, D.E.: Scalable Pattern Matching for High Speed Networks. In: Proceedings of the 12th Annual IEEE Symposium on Field-Programmable Custom Computing Machines, pp. 249-257. IEEE Computer Society, Washington (2004)
4. Tan, L., Sherwood, T.: A High Throughput String Matching Architecture for Intrusion Detection and Prevention. In: Proceedings of the 32nd annual international symposium on Computer Architecture, vol. 4, pp. 112-122 (2005)
5. Dharmapurikar, S., Lockwood, J.W.: Fast and scalable pattern matching for network intrusion detection systems. IEEE Journal on Selected Areas in Communications 24, 1781-1791 (2006)
6. Yu, F., Katz, R.H., Lakshman, T.V.: Gigabit rate packet pattern-matching using TCAM. In: Proceedings of the 12th IEEE International Conference on Network Protocols, 2004, pp. 174-183 (2004)
7. Alicherry, M., Muthuprasanna, M., Kumar, V.: High speed pattern matching for network IDS/IPS, pp. 187-196. IEEE Computer Society, Los Alamitos (2006)
8. Lei, S., Yue, Z., Jianming, Y., Bo, X., Bin, L., Jun, L.: On the Extreme Parallelism Inside Next-Generation Network Processors. In: Proceedings of INFOCOM, pp. 1379-1387 (2007)
9. Ni, J., Lin, C., Chen, Z., Ungsunan, P.: A Fast Multi-pattern Matching Algorithm for Deep Packet Inspection on a Network Processor. In: International Conference on Parallel Processing (2007)
10. Nvidia G80 Specs, http://www.nvidian.com/page/8800-features.html
11. Nvidia CUDA Programming Guide 2.1., http://developer.download.nvidia.com/ compute/cuda/2-1/NVIDIA-CUDA- Programming-Guide-2.1.pdf
12. Marziale, L., Richard, G.G., Roussev, V.: Massive threading: Using GPUs to increase the performance of digital forensics tools. Digital Investigation 4, 73-81 (2007)
13. Vasiliadis, G., Antonatos, S., Polychronakis, M., Markatos, E.P., Ioannidis, S.: Gnort: High performance network intrusion detection using graphics processors. In: Lippmann, R., Kirda, E., Trachtenberg, A. (eds.) RAID 2008. LNCS, vol. 5230, pp. 116-134. Springer, Heidelberg (2008)
14. Aho, A.V., Corasick, M.J.: Efficient String Matching: An Aid to Bibliographic Search. Communications of the ACM 18, 333-340 (1975)
15. Goyal, N., Ormont, J., Smith, R., Sankaralingam, K., Estan, C.: Signature Matching in Network Processing using SIMD/GPU Architectures. UW CS technical report 1628 (January 2008)
16. Smith, R., Estan, C., Jha, S., Kong, S.: Deflating the big bang: fast and scalable deep packet inspection with extended finite automata. In: Proceedings of the ACM SIGCOMM 2008 conference on Data communication, pp. 207-218. ACM, New York (2008)