CompactDFA: Generic state machine compression for scalable pattern matching

Proceedings - IEEE INFOCOM

Volumn , Issue , 2010, Pages

  Bremler Barr, Anat ^a   Hay, David ^b   Koral, Yaron ^a  

^a INTERDISCIPLINARY CENTER   (Israel)

^b Columbia University ^*  (United States)

Author keywords

[No Author keywords available]

Indexed keywords

AHO-CORASICK; DEGREE OF FREEDOM; DETERMINISTIC FINITE AUTOMATA; FAST MEMORY; INTRUSION DETECTION SYSTEMS; IP LOOKUP; LARGE CLASS; LONGEST-PREFIX MATCHING; LOW-POWER CONSUMPTION; MEMORY REQUIREMENTS; NOVEL METHODS; PATTERN MATCHING ALGORITHMS; PATTERN-MATCHING ALGORITHM; POWER CONSUMPTION; SPECIFIC STATE; STATE MACHINE; TWO-STATE;

ALGORITHMS; COMPUTER CRIME; FINITE AUTOMATA; PATTERN MATCHING; TRANSLATION (LANGUAGES);

INTRUSION DETECTION;

EID: 77953309234     PISSN: 0743166X     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/INFCOM.2010.5462160     Document Type: Conference Paper

References (21)

1. A. V. Aho and M. J. Corasick, "Efficient string matching: an aid to bibliographic search," Commun. of the ACM, no. 6, pp. 333-340, 1975.
2. L. Tan and T. Sherwood, "Architectures for bit-split string scanning in intrusion detection," IEEE Micro, pp. 110-117, 2006.
3. J. van Lunteren, "High-performance pattern-matching for intrusion detection," in Proc. IEEE INFOCOM, Apr. 2006, pp. 1-13.
4. R. T. Liu, N. F. Huang, C. N. Kao, C. H. Chen, and C. C. Chou, "A fast pattern-match engine for network processor-based network intrusion detection system," in Proc. Information Technology: Coding and Computing (ITCC), 2004, pp. 97-101.
5. D. Pao, W. Lin, and B. Liu, "Pipelined architecture for multi-string matching," IEEE Comput. Archit. Lett., vol. 7, pp. 33-36, 2008.
6. W. Lin and B. Liu, "Pipelined parallel AC-based approach for multi-string matching," in Proc. IEEE International Conference on Parallel and Distributed Systems (ICPADS), 2008, pp. 665-672.
7. F. Yu, T. V. Lakshman, M. A. Motoyama, and R. H. Katz, "SSA: a power and memory efficient scheme to multi-match packet classification," in Proc. ACM ANCS, 2005.
8. H. Song, F. Hao, M. Kodialam, and T. V. Lakshman, "IPv6 lookups using distributed and load balanced bloom filters for 100 gbps core router line cards," in Proc. IEEE INFOCOM, 2009.
9. T. Song, W. Zhang, D. Wang, and Y. Xue, "A memory efficient multiple pattern matching architecture for network security," in Proc. IEEE INFOCOM, April 2008, pp. 166-170.
10. "Snort," (May 2009). [Online]. Available: http://www.snort.org
11. A. Bremler-Barr, D. Hay, and Y. Koral, "CompactDFA: Generic state machine compression for scalable pattern matching - technical report." [Online]. Available: www.tlc-networks.polito.it/hay/CompactDFA.pdf
12. M. Ruiz-Sanchez, E. Biersack, and W. Dabbous, "Survey and taxonomy of IP address lookup algorithms," IEEE NETWORK, 2001.
13. R. Panigrahy and S. Sharma, "Reducing TCAM power consumption and increasing throughput," in Proc. IEEE HOT Interconnects, 2002, pp. 107-112.
14. D. E. Taylor, "Survey and taxonomy of packet classification techniques," in ACM Computing Surveys, September 2005.
15. F. Zane, G. Narlikar, and A. Basu, "CoolCAMs: power-efficient TCAMs for forwarding engines," in Proc. IEEE INFOCOM, 2003.
16. B. Agrawal and T. Sherwood, "Modeling TCAM power for next generation network devices," in Proc. IEEE ISPASS, 2006.
17. D. Lin, Y. Zhang, C. Hu, B. Liu, X. Zhang, and D. Pao, "Route table partitioning and load balancing for parallel searching with TCAMs," in Proc. IEEE IPDPS, 2007.
18. "ClamAV," (Version 0.82). [Online]. Available: http://www.calmav.net
19. N. Tuck, T. Sherwood, B. Calder, and G. Varghese, "Deterministic memory efficient string matching algorithms for intrusion detection," in Proc. IEEE INFOCOM, 2004.
20. F. Yu, R. H. Katz, and T. V. Lakshman, "Gigabit rate packet pattern-matching using TCAM," in Proc. IEEE ICNP, 2004, pp. 174-183.
21. Y. Weinsberg, S. Tzur-David, D. Dolev, and T. Anker, "High performance string matching algorithm for a network intrusion prevention system (NIPS)," in Proc. IEEE HPSR, 2006.