FEACAN: Front-end acceleration for content-aware network processing

Proceedings - IEEE INFOCOM

Volumn , Issue , 2011, Pages 2114-2122

  Qi, Yaxuan ^a   Wang, K ^a   Fong, J ^a   Xue, Yibo ^a   Li, Jun ^a   Jiang, Weirong ^b   Prasanna, Viktor ^b  

^a TSINGHUA NATIONAL LABORATORY FOR INFORMATION SCIENCE AND TECHNOLOGY   (China)

^b University of Southern California ^*  (United States)

Author keywords

DFA; hardware acceleration; regular expressions

Indexed keywords

ALGORITHM-LEVEL; APPLICATION IDENTIFICATION; CO-DESIGNS; COMPRESSION ALGORITHMS; CONTENT PROCESSING; CONTENT-AWARE; CONTENT-AWARE NETWORKS; CONTENT-BASED; DATA DELIVERY; DEEP PACKET INSPECTION; DFA; DISTRIBUTED NETWORK SYSTEMS; FRONT END; HARDWARE ACCELERATION; LOOKUP ENGINES; LOOKUPS; LOW-LATENCY; MEMORY USAGE; NETWORK PROCESSING; PROCESSING SPEED; REGULAR EXPRESSIONS; REGULAR-EXPRESSION MATCHING; RESOURCE UTILIZATIONS; SECURITY GATEWAYS; SIGNATURE-MATCHING; SYSTEM LEVEL DESIGN; SYSTEM LEVELS; WORK FOCUS;

ALGORITHMS;

EID: 79960865581     PISSN: 0743166X     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/INFCOM.2011.5935021     Document Type: Conference Paper

References (32)

1. PICMG, AdvancedTCA, http://www.picmg.org/
2. Netronome, Product Brief-NFE-i8000 Network Acceleration Card, 2006, http://www.netronome.com/
3. NetLogic, XLP832 http://www.netlogicmicro.com/Products/MultiCore/XLP.htm
4. Cavium, OCTEON5860, http://www.cavium.com/OCTEON-MIPS64.html
5. LSI Tarari T2000/T2500, http://www.lsi.com/networking-home/networking- products/tarari-content-processors/
6. NetLogic, NETL7, http://www.netlogicmicro.com/Products/Layer7/Layer7.htm
7. R. Sommer, V. Paxson, Enhancing Byte-Level Network Intrusion Detection Signatures with Context, in Proc. of ACM CCS, 2003.
8. J. E. Hopcroft and J. D. Ullman, Introduction to Automata Theory, Languages, and Computation, Addison Wesley, 1979.
9. A. V. Aho and M. J. Corasick, Efficient string matching: An aid to bibliographic search, Communications of the ACM, 18(6):333-340, 1975.
10. R. W. Floyd, and J. D. Ullman, The Compilation of RegularExpressions into Integrated Circuits, Journal of ACM, vol. 29, no. 3, pp 603-622, July 1982.
11. R. Sidhu and V. K. Prasanna, Fast Regular Expression Matching using FPGAs, in Proc. of FCCM, 2001.
12. C. R. Clark and D. E. Schimmel, Efficient Reconfigurable Logic Circuit for Matching Complex Network Intrusion Detection Patterns, in Proc. Of FPL, 2003.
13. J. Levandoski, E. Sommer, and M. Strait, Application Layer Packet Classifier for Linux, http://l7-filter.sourceforge.net/.
14. S. Kumar, S. Dharmapurikar, F. Yu, P. Crowley and J. Turner, Algorithms to Accelerate Multiple Regular Expressions Matching for Deep Packet Inspection, in Proc. of ACM SIGCOMM, 2006.
15. M. Becchi and P. Crowley, An Improved Algorithm to Accelerate Regular Expression Evaluation, in Proc. of ACM/IEEE ANCS, 2007.
16. N. Tuck, T. Sherwood, B. Calder and G. Varghese, Deterministic Memory-efficient String Matching Algorithms for Intrusion Detection, in Proc. of IEEE INFOCOM, 2004.
17. B. C. Brodie, R. K. Cytron. nd D. E. Taylor, A Scalable Architecture For High-Throughput Regular-Expression Pattern Matching, in Proc. Of ISCA, 2006.
18. S. Kumar, J. Turner and J. Williams, Advanced Algorithms for Fast and Scalable Deep Packet Inspection, in Proc. of ACM/IEEE ANCS, 2006.
19. Snort Open Source IDS/IPS, http://www.snort.org
20. M. Becchi, Regular Expression Processor, http://regex.wustl.edu/
21. Y. Qi, B. Xu, F. He, B. Yang. J. Yu, J. Li, Towards High-performance Flow-level Packet Processing on Multi-core Network Processors, in Proc. of ACM/IEEE ANCS, 2007.
22. Q. Wang and V. K. Prasanna, Multi-Core Architecture on FPGA for Large Dictionary String Matching, in Proc. of FCCM, 2009.
23. A. Basu and G. Narlikar, Fast Incremental Updates for Pipelined Forwarding Engines, in Proc. of IEEE INFOCOM, 2003.
24. http://www.bro-ids.org/
25. DARPA intrusion detection data sets, http://www.ll.mit.edu/mission/ communications/ist/corpora/ideval/data/index.html
26. http://www.xilinx.com/products/virtex6/
27. F. Yu, Z. Chen, Y. Diao, T. V. Lakshman and R. H. Katz, Fast and Memory-Efficient Regular Expression Matching for Deep Packet Inspection, in Proc. of ACM/IEEE ANCS, 2006.
28. M. Becchi and P. Crowley, A Hybrid Finite Automaton for Practical Deep Packet Inspection, in Proc. of CoNEXT, 2007.
29. S. Kumar, B. Chandrasekaran, J. Turner and G. Varghese, Curing Regular Expressions Matching Algorithms from Insomnia, Amnesia, and Acalculia, in Proc. of ACM/IEEE ANCS, 2007.
30. R. Smith, C. Estan and S. Jha, XFA: Faster Signature Matching with Extended Automata, in Proc. of IEEE Symposium on Security and Privacy, 2008.
31. R. Smith, C. Estan and S. Jha and S. Kong, Deflating the big bang: Fast and Scalable Deep Packet Inspection with Extended Finite Automata, in Proc. of ACM SIGCOMM, 2008.
32. M. Becchi, C. Wiseman and P. Crowley, Evaluating Regular Expression Matching Engines on Network and General Purpose Processors, in Proc. of ACM/IEEE ANCS, 2009.