Super fast hardware string matching+

Chia Tien Dan Lo, Yi Gang Tai, Kleanthis Psarris, Wen Jyi Hwang

研究成果: 書貢獻/報告類型會議貢獻

6 引文 斯高帕斯(Scopus)

摘要

With the appearance of multi-gigabit network infrastructure, a typical network intrusion detection system (NIDS) has to cope with the network speed. By examining each packet flowing through a network segment, suspicious packets are detected and reported to assure security. Up to 57 % of the execution time in a NIDS is found to compare string against a predefined/known pattern. It is hard to implement a multigigabit performance NIDS without hardware support. This paper proposes a very high speed string matching algorithm which can be easily implemented into FPGAs. The parallel matching design takes a segment of text from the payload of a packet and detects all possible tokens including those crossing text segment boundaries. Simulation results show a throughput of 23.43 Gbps with a moderate operating frequency of 366.2 MHz.

原文英語
主出版物標題Proceedings - 2006 IEEE International Conference on Field Programmable Technology, FPT 2006
頁面385-388
頁數4
DOIs
出版狀態已發佈 - 2006 十二月 1
事件2006 IEEE International Conference on Field Programmable Technology, FPT 2006 - Bangkok, 泰国
持續時間: 2006 十二月 132006 十二月 15

出版系列

名字Proceedings - 2006 IEEE International Conference on Field Programmable Technology, FPT 2006

其他

其他2006 IEEE International Conference on Field Programmable Technology, FPT 2006
國家泰国
城市Bangkok
期間06/12/1306/12/15

ASJC Scopus subject areas

  • Software

指紋 深入研究「Super fast hardware string matching<sup>+</sup>」主題。共同形成了獨特的指紋。

  • 引用此

    Lo, C. T. D., Tai, Y. G., Psarris, K., & Hwang, W. J. (2006). Super fast hardware string matching+. 於 Proceedings - 2006 IEEE International Conference on Field Programmable Technology, FPT 2006 (頁 385-388). [4042476] (Proceedings - 2006 IEEE International Conference on Field Programmable Technology, FPT 2006). https://doi.org/10.1109/FPT.2006.270354