LaFA: Lookahead finite automata for scalable regular expression detection

ANCS'09: Symposium on Architecture for Networking and Communications Systems

Volumn , Issue , 2009, Pages 40-49

  Bando, Masanori ^a   Artan, N Sertac ^a   Chao, H Jonathan ^a  

^a POLYTECHNIC UNIVERSITY   (United States)

Author keywords

deep packet inspection; finite automation; FPGA; LaFA; network intrusion detection system; regular expressions

Indexed keywords

DEEP PACKET INSPECTION; FINITE AUTOMATION; FPGA; LAFA; NETWORK INTRUSION DETECTION SYSTEMS; REGULAR EXPRESSIONS;

COMPUTER CRIME; DETECTORS; FIELD PROGRAMMABLE GATE ARRAYS (FPGA); FINITE AUTOMATA; NETWORK ARCHITECTURE; NETWORK SECURITY; OPTIMIZATION; PACKET NETWORKS; SCALABILITY; THROUGHPUT;

INTRUSION DETECTION;

EID: 77954055303     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1882486.1882496     Document Type: Conference Paper

References (27)

1. Bro intrusion detection system. http://www.bro-ids.org.
2. Snort network intrusion detection system. http://www.snort.org.
3. A. V. Aho, M. S. Lam, R. Sethi, and J. D. Ullman. Compilers: Principles, Techniques, and Tools (2nd Edition). Addison Wesley, 2006.
4. A. N. Arslan. Multiple Sequence Alignment Containing a Sequence of Regular Expressions. In CIBCB, pages 1-7, 2005.
5. N. S. Artan, M. Bando, and H. J. Chao. Boundary hash for memory-efficient deep packet inspection. In ICC, pages 1732-1737, 2008.
6. N. S. Artan and H. J. Chao. TriBiCa: Trie bitmap content analyzer for high-speed network intrusion detection. In INFOCOM, pages 125-133, 2007.
7. Z. K. Baker, H.-J. Jung, and V. K. Prasanna. Regular expression software deceleration for intrusion detection systems. In FPL, pages 1-8, 2006.
8. M. Bando, N. S. Artan, and H. J. Chao. Highly memory-efficient LogLog Hash for deep packet inspection. In GLOBECOM, pages 1-6, 2008.
9. M. Becchi and S. Cadambi. Memory-efficient regular expression search using state merging. In INFOCOM, pages 1064-1072, 2007.
10. M. Becchi and P. Crowley. A hybrid finite automaton for practical deep packet inspection. In CoNEXT, 2007.
11. M. Becchi and P. Crowley. An improved algorithm to accelerate regular expression evaluation. In ANCS, pages 145-154, 2007.
12. M. Becchi and P. Crowley. Extending finite automata to effeciently match perl-compatible regular expressions. In CoNEXT, 2008.
13. Y. H. Cho and W. H. Mangione-Smith. Deep network packet filter design for reconfigurable devices. Trans. on Embedded Computing Sys., 7(2):1-26, 2008.
14. Y. S. Chung, W. H. Lee, C. Y. Tang, and C. L. Lu. RE-MuSiC: a tool for multiple sequence alignment with regular expression constraints. Nucleic Acids Res. (Web Server issue), (35):W639-644, 2007.
15. S. Dharmapurikar, P. Krishnamurthy, T. S. Sproull, and J. W. Lockwood. Deep packet inspection using parallel bloom filters. Micro, 24(1):52-61, 2004.
16. D. Ficara, S. Giordano, G. Procissi, F. Vitucci, G. Antichi, and A. Di Pietro. An improved DFA for fast regular expression matching. SIGCOMM Comput. Commun. Rev., 38(5):29-40, 2008.
17. S. Kumar, B. Chandrasekaran, J. Turner, and G. Varghese. Curing regular expressions matching algorithms from insomnia, amnesia, and acalculia. In ANCS, pages 155-164, 2007.
18. S. Kumar, S. Dharmapurikar, F. Yu, P. Crowley, and J. Turner. Algorithms to accelerate multiple regular expressions matching for deep packet inspection. In SIGCOMM, pages 339-350, 2006.
19. S. Kumar, J. Turner, and J. Williams. Advanced algorithms for fast and scalable deep packet inspection. In ANCS, pages 81-92, 2006.
20. J. Levandoski, E. Sommer, and M.Strait. Application layer packet classifer for linux. http://l7-filter.sourceforge.net.
21. M. Paolieri, I. Bonesana, and M. D. Santambrogio. ReCPU: A parallel and pipelined architecture for regular expression matching. In IFIP, VLSI - SoC., pages 19-24, 2007.
22. R. Smith, C. Estan, and S. Jha. XFA: Faster signature matching with extended automata. In SP, pages 187-201, 2008.
23. R. Smith, C. Estan, S. Jha, and S. Kong. Deflating the big bang: Fast and scalable deep packet inspection with extended finite automata. In SIGCOMM, 2008.
24. I. Sourdis, D. Pnevmatikatos, and S. Vassiliadis. Scalable multigigabit pattern matching for packet inspection. In VLSI, volume 16, pages 156-166, 2008.
25. N. Wirth. Compiler Construction. Addison Wesley, 1996.
26. F. Yu, Z. Chen, Y. Diao, T. V. Lakshman, and R. H. Katz. Fast and memory-efficient regular expression matching for deep packet inspection. In ANCS, pages 93-102, 2006.
27. F. Yu, R. Katz, and T. Lakshman. Gigabit rate packet pattern-matching using TCAM. In ICNP, pages 174-183, 2004.