A novel hierarchical parallelism for accelerating NIDS using GPUs

Cheng Hung Lin, Cheng Hung Hsieh

研究成果: 書貢獻/報告類型會議論文篇章

5 引文 斯高帕斯(Scopus)

摘要

Multi-string matching has been widely used in network intrusion detection systems to detect network attacks and malicious network packets by matching packet contents with thousands of attack patterns. Due to the rapid increase of network attacks and network speeds, multi-string matching faces higher performance and throughput challenges. In order to improve the performance and throughput of multi-string matching, this paper presents a hierarchical parallelism that accelerates multi-string matching on multiple GPUs. The hierarchical parallelism consists of three layers of parallelism. From top to bottom, the first layer is the data parallelism on multiple GPUs, the second layer is the task parallelism on a single GPU, and the last layer is the data parallelism of the Aho-Corasick algorithm. Experimental results show that the hierarchical parallelism on a machine featured with four Titan X GPUs achieves up to 70 Gbps of throughput, more than 40 times faster than the Aho-Corasick algorithm used in Snort. As the number of GPUs increases, the throughput of the hierarchical parallelism will increase. In addition, the proposed approach adopts perfect hashing to construct state machines and achieves up to 99.2% of memory reduction on Snort. Finally, the proposed hierarchical parallelism is implemented in the open source network intrusion detection system, Snort.

原文英語
主出版物標題Proceedings of 4th IEEE International Conference on Applied System Innovation 2018, ICASI 2018
編輯Artde Donald Kin-Tak Lam, Stephen D. Prior, Teen-Hang Meen
發行者Institute of Electrical and Electronics Engineers Inc.
頁面578-581
頁數4
ISBN(電子)9781538643426
DOIs
出版狀態已發佈 - 2018 六月 22
事件4th IEEE International Conference on Applied System Innovation, ICASI 2018 - Chiba, 日本
持續時間: 2018 四月 132018 四月 17

出版系列

名字Proceedings of 4th IEEE International Conference on Applied System Innovation 2018, ICASI 2018

會議

會議4th IEEE International Conference on Applied System Innovation, ICASI 2018
國家/地區日本
城市Chiba
期間2018/04/132018/04/17

ASJC Scopus subject areas

  • 電腦網路與通信
  • 硬體和架構
  • 能源工程與電力技術
  • 控制與系統工程
  • 機械工業
  • 控制和優化
  • 建模與模擬
  • 生物醫學工程

指紋

深入研究「A novel hierarchical parallelism for accelerating NIDS using GPUs」主題。共同形成了獨特的指紋。

引用此