A pattern-matching co-processor for network intrusion detection systems

Proceedings - 2003 IEEE International Conference on Field-Programmable Technology, FPT 2003

Volumn , Issue , 2003, Pages 68-74

  Clark, Christopher R ^a   Schimmel, David E ^a  

^a GEORGIA INSTITUTE OF TECHNOLOGY   (United States)

Author keywords

FPGA; Network intrusion detection; Network processor; Non deterministic finite automata (NFA); Pattern matching

Indexed keywords

COMPLEX NETWORKS; COMPUTER CRIME; FIELD PROGRAMMABLE GATE ARRAYS (FPGA); FINITE AUTOMATA; MERCURY (METAL); PATTERN MATCHING; PIPELINE PROCESSING SYSTEMS;

APPROXIMATE MATCHING; DESIGN AND ANALYSIS; HARDWARE AND SOFTWARE COMPONENTS; NETWORK INTRUSION DETECTION; NETWORK INTRUSION DETECTION SYSTEMS; NETWORK PROCESSOR; NONDETERMINISTIC FINITE AUTOMATON; REGULAR EXPRESSIONS;

INTRUSION DETECTION;

EID: 84946045930     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/FPT.2003.1275733     Document Type: Conference Paper

References (13)

1. J. Allen, A. Christie, W. Fithen, J. McHugh, J. Pickel, and E. Stonesr, "State of the Practice of Intrusion Detection Technologies", Technical Report CMU/SEI-99-TR-028, 1999.
2. L. G. Roberts, "Beyond Moore's Law: Internet Growth Trends", IEEE Computer, pp. 117-119, Jan 2000.
3. Marc Necker, Didier Contis, and David Schimmel, "TCP-Stream Reassembly and State Tracking in Hardware", Proceedings of FCCM 2002, pp. 286-287, Apr. 2002.
4. James Moscola, John Lockwood, Ronald P. Loui, and Michael Pachos, "Implementation of a Content-Scanning Module for an Internet Firewall", Proceedings of IEEE FCCM 2003, April 2003.
5. Martin Roesch and Chris Green, "Snort User's Manual". Online: http://www.snort.org.
6. Mike Fisk and George Varghese, "Fast Content-Based Packet Handling for Intrusion Detection", Technical Report UCSD CS2001-0670, May 2001.
7. C. Jason Coit, Stuart Stamford, and Joseph McAlemey, "Towards Faster String Matching for Intrusion Detection", DARPA Information Survivability Conference, June 2001.
8. R. Sidhu and V. K. Prasanna, "Fast Regular Expression Matching using FPGAs", Proceedings of IEEE FCCM 2001, Apr. 2001.
9. R. Franklin, D. Carver, and B. L. Hutchings, "Assisting Network Intrusion Detection with Reconfigurable Hardware", Proceedings of IEEE FCCM 2002, pp. 111-120, Apr. 2002.
10. Christopher Clark and David Schimmel, "Efficient Reconfigurable Logic Circuits for Matching Complex Network Intrusion Detection Patterns", Proceedings of FPL 2003, Sep, 2003.
11. P. Bellows and B. L. Hutchings, "JHDL-An HDL for Reconfigurable Systems", Proceedings of IEEE FCCM 1998, pp. 175-184, Apr. 1998. Software available at http://www.jhdl.org
12. Ricardo Baeza-Yates and Gonzalo Navarro, "Faster Approximate String Matching", Aigorithmica 23(2), pp. 127-158, 1999.
13. J. Kuri and G. Navarro, "Fast Multipattern Search Algorithms for Intrusion Detection", Proceedings of Siring Processing and Information Retrieval (SPIRE 2000), pp. 169-180, 2000.