Efficient packet pattern matching for gigabit network intrusion detection using GPUs

Proceedings of the 14th IEEE International Conference on High Performance Computing and Communications, HPCC-2012 - 9th IEEE International Conference on Embedded Software and Systems, ICESS-2012

Volumn , Issue , 2012, Pages 1612-1617

  Hung, Che Lun ^a   Lin, Chun Yuan ^b   Wang, Hsiao Hsi ^a   Chang, Chin Yuan ^a  

^a PROVIDENCE UNIVERSITY   (Taiwan)

^b CHANG GUNG UNIVERSITY   (Taiwan)

Author keywords

GPU; Intrusion Dection Systems; Parallel Processing; Patttern Matching

Indexed keywords

COMPUTATIONAL POWER; GIGABIT NETWORK; GPU; HARDWARE TECHNOLOGY; HIGHER NETWORKS; INTRUSION DETECTION SYSTEMS; LINK SPEED; NETWORK BANDWIDTH; NETWORK INTRUSION DETECTION SYSTEMS; PACKET PROCESSING; PARALLEL PROCESSING; PATTERN MATCHING ALGORITHMS; PATTTERN MATCHING; TRAFFIC PROCESSING;

ALGORITHMS; COMPUTATIONAL EFFICIENCY; COMPUTER CRIME; EMBEDDED SOFTWARE; PATTERN MATCHING; PROGRAM PROCESSORS;

INTRUSION DETECTION;

EID: 84870432780     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/HPCC.2012.235     Document Type: Conference Paper

References (20)

1. S. Antonatos, K. Anagnostakis, and E. Markatos, "Generating realistic workloads for network intrusion detection systems," Proc. ACM Workshop on Software and Performance, Jan. 2004, pp. 207-215.
2. J. B. D. Cabrera, J. Gosar,W. Lee, and R. K. Mehra, "On the statistical distribution of processing times in network intrusion detection," Proc. IEEE Conf. on Decision and Control, Dec. 2004, pp. 75-80.
3. D. E. Knuth, J. Morris, and V. Pratt, "Fast pattern matching in strings," SIAM J. on Computing, vol. 6, 1997, pp. 127-146, 1977.
4. R. S. Boyer and J. S. Moore, "A fast string searching algorithm," Communications of the Association for Computing Machinery, vol. 20, Oct. 1977, pp. 762-772.
5. A. V. Aho and M. J. Corasick, "Efficient string matching: an aid to bibliographic search," Communications of the ACM, vol. 18, June 1975, pp. 333-340.
6. B. Commentz-Walter, "A string matching algorithm fast on the average," Proc. Intl. Colloquium on Automata, Languages and Programming, 1979, pp. 118-131.
7. S. Wu and U. Manber, "A fast algorithm for multi-pattern searching," Technical Report TR-94-17, 1994.
8. C. Coit, S. Staniford, and J. McAlerney, "Towards faster string matching for intrusion detection or exceeding the speed of Snort," Proc. DARPA Information Survivability Conference & Exposition II, June 2001, pp. 367-373.
9. M. Roesch, "Snort: Lightweight intrusion detection for networks," Proc. USENIX LISA Systems Administration Conference, Nov. 1999, pp. 229-238.
10. M. Fisk and G. Varghese, "Applying fast string matching to intrusion detection," Technical Report In preparation, successor to UCSD TR CS2001-0670, 2002.
11. N. Tuck, T. Sherwood, B. Calder, and G. Varghese, "Deterministic memory-efficient string matching algorithms for intrusion detection," Proc. IEEE Infocom Conf., 2004, pp. 333-340.
12. R. Sidhu and V. Prasanna, "Fast regular expression matching using FPGAs," Proc. IEEE Symp. Field-Programmable Custom Computing Machines, 2001.
13. Z. K. Baker and V. K. Prasanna, "Time and area efficient pattern matching on FPGAs," Proc. ACM/SIGDA Intl. Symp. Field Programmable Gate Arrays, 2004, pp. 223-232.
14. M. Attig and J. Lockwood, "A framework for rule processing in reconfigurable network systems" Proc. Annual IEEE Symp. Field Programmable Custom Computing Machines, 2005, pp. 225-234.
15. H. Bos and K. Huang, "Towards software-based signature detection for intrusion prevention on the network card," Proc. Intl. Symp. Recent Advances in Intrusion Detection, Sept. 2005.
16. D. L. Cook, J. Ioannidis, A. D. Keromytis, and J. Luck, "Cryptographics: Secret key cryptography using graphics cards," Proc. RSA Conference, Cryp-tographer's Track, 2005, pp. 334-350.
17. Nvidia, "cuda c best practices guide", version 4. Online, March 2011.
18. N. Jacob and C. Brodley, "Offloading IDS computation to the GPU," Proc. IEEE. Annual Computer Security Applications Conf., 2006, pp. 371-380.
19. G. Vasiliadis , S. Antonatos , M. Polychronakis , E. P, and S. Ioannidis, "Gnort: High performance network intrusion detection using graphics processors", Proc. Intl. Symp. Recent Advances in Intrusion Detection, 2008, pp. 116-134.
20. J.D. Owens, D. Luebke, N. Govindaraju, M. Harris, J. Krüger, A.E. Lefohn, and T. Purcell, "A Survey of General-Purpose Computation on Graphics Hardware," Computer Graphics Forum, vol. 26, 2007, pp. 80-113.