Fast, large-scale string match for a 10 Gbps FPGA-based NIDS

New Algorithms, Architectures and Applications for Reconfigurable Computing

Volumn , Issue , 2005, Pages 195-207

  Sourdis, Ioannis ^a   Pnevmatikatos, Dionisios ^b  

^a TECHNICAL UNIVERSITY OF CRETE   (Greece)

^b INSTITUTE OF COMPUTER SCIENCE   (Greece)

Author keywords

FPGA based Network Intrusion Detection Systems; Network security; String matching

Indexed keywords

EID: 84892262618     PISSN: None     EISSN: None     Source Type: Book    
DOI: 10.1007/1-4020-3128-9_16     Document Type: Chapter

References (12)

1. SNORT official web site: (http://www.snort.org)
2. Roesch, M.: Snort-lightweight intrusion detection for networks. In: Proceedings of LISA'99:13th Administration Conference. (1999) Seattle Washington, USA.
3. Desai, N.: Increasing performance in high speed NIDS. In: www.linuxsecurity.com. (2002)
4. Coit, C. J., Staniford, S., McAlerney, J.: Towards faster string matching for intrusion detection or exceeding the speed of snort. In: DISCEXII, DAPRA Information Survivability conference and Exposition. (2001) Anaheim, California, USA.
5. Gokhale, M., Dubois, D., Dubois, A., Boorman, M., Poole, S., Hogsett, V.: Granidt: Towards gigabit rate network intrusion detection technology. In: Proceedings of 12th International Conference on Field Programmable Logic and Applications. (2002) France.
6. Moscola, J., Lockwood, J., Loui, R. P., Pachos, M.: Implementation of a content-scanning module for an internet firewall. In: Proceedings of IEEE Workshop on FPGAs for Custom Computing Machines. (2003) Napa, CA, USA.
7. Young, H. Cho, S. N., Mangione-Smith, W.: Specialized hardware for deep network packet filtering. In: Proceedings of 12th International Conference on Field Programmable Logic and Applications. (2002) France.
8. Franklin, R., Carver, D., Hutchings, B.: Assisting network intrusion detection with reconfigurable hardware. In: IEEE Symposium on Field-Programmable Custom Computing Machines. (2002)
9. Sidhu, R., Prasanna, V. K.: Fast regular expression matching using fpgas. In: IEEE Symposium on Field-Programmable Custom Computing Machines. (2001) Rohnert Park, CA, USA.
10. Lockwood, J. W.: An open platform for development of network processing modules in reconfigurable hardware. In: IEC DesignCon'01. (2001) Santa Clara, CA, USA.
11. Pryor, D. V., Thistle, M. R., Shirazi, N.: Text searching on splash 2. In: Proceedings of IEEE Workshop on FPGAs for Custom Computing Machines. (1993) 172-177.
12. Clark, C. R., Schimmel, D. E.: Efficient Reconfigurable Logic Circuit for Matching Complex Network Intrusion Detection Patterns. In: Proceedings of 13th International Conference on Field Programmable Logic and Applications (Short Paper). (2003), Lisbon, Portugal.