High throughput signature based platform for network intrusion detection

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 8259 LNCS, Issue PART 2, 2013, Pages 544-551

  Bande Serrano, José Manuel ^a   Hernández Palancar, José ^a   Cumplido, René ^b  

^a ADVANCED TECHNOLOGIES APPLICATION CENTER   (Cuba)

^b INSTITUTO NACIONAL DE ASTROFÍSICA   (Mexico)

Author keywords

Content scanning; FPGA; NIDS; String matching; Unique substrings

Indexed keywords

CONTENT SCANNING; EMBEDDED MEMORY BLOCKS; HIGH THROUGHPUT; NETWORK INTRUSION DETECTION; NIDS; SIGNATURE-MATCHING; STRING MATCHING; SUB-STRINGS;

CLOCKS; INTRUSION DETECTION; PATTERN RECOGNITION;

FIELD PROGRAMMABLE GATE ARRAYS (FPGA);

EID: 84893185696     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/978-3-642-41827-3_68     Document Type: Conference Paper

References (12)

1. Endorf, C., Schultz, E., Mellander, J.: Intrusion detection and prevention. Mc-Graw-Hill (2004)
2. Ghorbani, A., Lu, W., Tavallaee, M.: Network intrusion detection and prevention: concepts and techniques, vol. 47. Springer (2010)
3. Baker, Z.K., Prasanna, V.K.: Automatic synthesis of efficient intrusion detection systems on fpgas. IEEE Trans. Dependable Secur. Comput. 3(4), 289-300 (2006)
4. Hwang, W.J., Ou, C.M., Shih, Y.-N., Lo, C.T.D.: High throughput and low area cost fpga-based signature match circuit for network intrusion detection. Journal of the Chinese Institute of Engineers 32(3), 397-405 (2009)
5. Kennedy, A., Wang, X., Liu, Z., Liu, B.: Ultra-high throughput string matching for deep packet inspection. In: Proceedings of the Conference on Design, Automation and Test in Europe, DATE 2010, pp. 399-404 (2010)
6. Lin, C.-H., Chang, S.-C.: Efficient pattern matching algorithm for memory architecture. IEEE Trans. Very Large Scale Integr. Syst. 19(1), 33-41 (2011)
7. Guinde, N.B., Ziavras, S.G.: Efficient hardware support for pattern matching in network intrusion detection. Computers & Security 29(7), 756-769 (2010)
8. Prasanna, V.K., Le, H.: A Memory-Efficient and Modular Approach for Large-Scale String Pattern Matching. IEEE Transactions on Computers 62(5), 844-857 (2013)
9. Serrano, J.M.B., Palancar, J.H.: String alignment pre-detection using unique subsequences for FPGA-based network intrusion detection. Computer Communications 35(6), 720-728 (2012)
10. Serrano, J.M.B., Palancar, J.H., Cumplido, R.: Multi-character cost-effective and high throughput architecture for content scanning. In: Microprocessors and Microsystems (in press, 2013) (accepted manuscript), available online August 22: http://authors.elsevier.com/sd/article/ S0141933113000999
11. Wang, H., Pu, S., Knezek, G., Liu, J.-C.: MIN-MAX: A Counter-Based Algorithm for Regular Expression Matching. IEEE Transactions on Parallel and Distributed Systems 24(1), 92-103 (2013)
12. Snort, http://www.snort.org