A novel hierarchical parallelism for accelerating NIDS using GPUs

Cheng Hung Lin, Cheng Hung Hsieh

Research output: Chapter in Book/Report/Conference proceedingConference contribution

1 Citation (Scopus)

Abstract

Multi-string matching has been widely used in network intrusion detection systems to detect network attacks and malicious network packets by matching packet contents with thousands of attack patterns. Due to the rapid increase of network attacks and network speeds, multi-string matching faces higher performance and throughput challenges. In order to improve the performance and throughput of multi-string matching, this paper presents a hierarchical parallelism that accelerates multi-string matching on multiple GPUs. The hierarchical parallelism consists of three layers of parallelism. From top to bottom, the first layer is the data parallelism on multiple GPUs, the second layer is the task parallelism on a single GPU, and the last layer is the data parallelism of the Aho-Corasick algorithm. Experimental results show that the hierarchical parallelism on a machine featured with four Titan X GPUs achieves up to 70 Gbps of throughput, more than 40 times faster than the Aho-Corasick algorithm used in Snort. As the number of GPUs increases, the throughput of the hierarchical parallelism will increase. In addition, the proposed approach adopts perfect hashing to construct state machines and achieves up to 99.2% of memory reduction on Snort. Finally, the proposed hierarchical parallelism is implemented in the open source network intrusion detection system, Snort.

Original languageEnglish
Title of host publicationProceedings of 4th IEEE International Conference on Applied System Innovation 2018, ICASI 2018
EditorsArtde Donald Kin-Tak Lam, Stephen D. Prior, Teen-Hang Meen
PublisherInstitute of Electrical and Electronics Engineers Inc.
Pages578-581
Number of pages4
ISBN (Electronic)9781538643426
DOIs
Publication statusPublished - 2018 Jun 22
Externally publishedYes
Event4th IEEE International Conference on Applied System Innovation, ICASI 2018 - Chiba, Japan
Duration: 2018 Apr 132018 Apr 17

Publication series

NameProceedings of 4th IEEE International Conference on Applied System Innovation 2018, ICASI 2018

Conference

Conference4th IEEE International Conference on Applied System Innovation, ICASI 2018
CountryJapan
CityChiba
Period18/4/1318/4/17

Keywords

  • Aho-Corasick algorithm
  • graphics processing units
  • multiple string matching
  • network intrusion detection systems

ASJC Scopus subject areas

  • Computer Networks and Communications
  • Hardware and Architecture
  • Energy Engineering and Power Technology
  • Control and Systems Engineering
  • Mechanical Engineering
  • Control and Optimization
  • Modelling and Simulation
  • Biomedical Engineering

Fingerprint Dive into the research topics of 'A novel hierarchical parallelism for accelerating NIDS using GPUs'. Together they form a unique fingerprint.

  • Cite this

    Lin, C. H., & Hsieh, C. H. (2018). A novel hierarchical parallelism for accelerating NIDS using GPUs. In A. D. K-T. Lam, S. D. Prior, & T-H. Meen (Eds.), Proceedings of 4th IEEE International Conference on Applied System Innovation 2018, ICASI 2018 (pp. 578-581). (Proceedings of 4th IEEE International Conference on Applied System Innovation 2018, ICASI 2018). Institute of Electrical and Electronics Engineers Inc.. https://doi.org/10.1109/ICASI.2018.8394319