Hieu et al., 2013 - Google Patents
A memory efficient FPGA-based pattern matching engine for stateful NIDSHieu et al., 2013
- Document ID
- 3442518835804342134
- Author
- Hieu T
- Tran N
- Publication year
- Publication venue
- 2013 Fifth International Conference on Ubiquitous and Future Networks (ICUFN)
External Links
Snippet
Pattern matching task plays an important role in network security applications especially Network Intrusion Detection System (NIDS). The limitation of matching throughput on general purpose processor gives rise to implementation of the task on FPGA. In this paper …
- 230000015654 memory 0 title abstract description 60
Classifications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING; COUNTING
- G06F—ELECTRICAL DIGITAL DATA PROCESSING
- G06F17/00—Digital computing or data processing equipment or methods, specially adapted for specific functions
- G06F17/30—Information retrieval; Database structures therefor; File system structures therefor
- G06F17/30943—Information retrieval; Database structures therefor; File system structures therefor details of database functions independent of the retrieved data type
- G06F17/30964—Querying
- G06F17/30979—Query processing
- G06F17/30985—Query processing by using string matching techniques
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING; COUNTING
- G06F—ELECTRICAL DIGITAL DATA PROCESSING
- G06F17/00—Digital computing or data processing equipment or methods, specially adapted for specific functions
- G06F17/30—Information retrieval; Database structures therefor; File system structures therefor
- G06F17/30943—Information retrieval; Database structures therefor; File system structures therefor details of database functions independent of the retrieved data type
- G06F17/30946—Information retrieval; Database structures therefor; File system structures therefor details of database functions independent of the retrieved data type indexing structures
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING; COUNTING
- G06F—ELECTRICAL DIGITAL DATA PROCESSING
- G06F17/00—Digital computing or data processing equipment or methods, specially adapted for specific functions
- G06F17/30—Information retrieval; Database structures therefor; File system structures therefor
- G06F17/30286—Information retrieval; Database structures therefor; File system structures therefor in structured data stores
- G06F17/30386—Retrieval requests
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING; COUNTING
- G06F—ELECTRICAL DIGITAL DATA PROCESSING
- G06F17/00—Digital computing or data processing equipment or methods, specially adapted for specific functions
- G06F17/30—Information retrieval; Database structures therefor; File system structures therefor
- G06F17/30286—Information retrieval; Database structures therefor; File system structures therefor in structured data stores
- G06F17/30312—Storage and indexing structures; Management thereof
- G06F17/30321—Indexing structures
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING; COUNTING
- G06F—ELECTRICAL DIGITAL DATA PROCESSING
- G06F17/00—Digital computing or data processing equipment or methods, specially adapted for specific functions
- G06F17/30—Information retrieval; Database structures therefor; File system structures therefor
- G06F17/3061—Information retrieval; Database structures therefor; File system structures therefor of unstructured textual data
- G06F17/30613—Indexing
- G06F17/30619—Indexing indexing structures
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L45/00—Routing or path finding of packets in data switching networks
- H04L45/74—Address processing for routing
- H04L45/745—Address table lookup or address filtering
- H04L45/7457—Address table lookup or address filtering using content-addressable memories [CAM]
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING; COUNTING
- G06F—ELECTRICAL DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/50—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
- G06F21/55—Detecting local intrusion or implementing counter-measures
- G06F21/56—Computer malware detection or handling, e.g. anti-virus arrangements
- G06F21/562—Static detection
- G06F21/563—Static detection by source code analysis
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L45/00—Routing or path finding of packets in data switching networks
- H04L45/74—Address processing for routing
- H04L45/745—Address table lookup or address filtering
- H04L45/7453—Address table lookup or address filtering using hashing
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING; COUNTING
- G06F—ELECTRICAL DIGITAL DATA PROCESSING
- G06F12/00—Accessing, addressing or allocating within memory systems or architectures
- G06F12/02—Addressing or allocation; Relocation
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING; COUNTING
- G06F—ELECTRICAL DIGITAL DATA PROCESSING
- G06F7/00—Methods or arrangements for processing data by operating upon the order or content of the data handled
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING; COUNTING
- G06F—ELECTRICAL DIGITAL DATA PROCESSING
- G06F2207/00—Indexing scheme relating to methods or arrangements for processing data by operating upon the order or content of the data handled
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| US7356663B2 (en) | Layered memory architecture for deterministic finite automaton based string matching useful in network intrusion detection and prevention systems and apparatuses | |
| Qu et al. | High-performance and dynamically updatable packet classification engine on FPGA | |
| Jiang et al. | Field-split parallel architecture for high performance multi-match packet classification using FPGAs | |
| Ullah et al. | UE-TCAM: an ultra efficient SRAM-based TCAM | |
| US8010481B2 (en) | Pattern matching technique for high throughput network processing | |
| US20110119440A1 (en) | Dynamic programmable intelligent search memory | |
| Le et al. | A memory-efficient and modular approach for large-scale string pattern matching | |
| US20140019486A1 (en) | Logic Content Processing for Hardware Acceleration of Multi-Pattern Search | |
| Faezipour et al. | Wire-speed TCAM-based architectures for multimatch packet classification | |
| Hieu et al. | A memory efficient FPGA-based pattern matching engine for stateful NIDS | |
| Wang et al. | Memory-based architecture for multicharacter Aho–Corasick string matching | |
| Jiang et al. | Scalable multi-pipeline architecture for high performance multi-pattern string matching | |
| Cheng et al. | Scalable multi-match packet classification using TCAM and SRAM | |
| Arun et al. | Functional verification of signature detection architectures for high speed network applications | |
| Villa et al. | Input-independent, scalable and fast string matching on the Cray XMT | |
| Hieu et al. | ENREM: An efficient NFA-based regular expression matching engine on reconfigurable hardware for NIDS | |
| Bontupalli et al. | Efficient memristor-based architecture for intrusion detection and high-speed packet classification | |
| Fide et al. | A survey of string matching approaches in hardware | |
| Sert et al. | NFA based regular expression matching on FPGA | |
| Guinde et al. | Efficient hardware support for pattern matching in network intrusion detection | |
| Cho et al. | Programmable hardware for deep packet filtering on a large signature set | |
| Valgenti et al. | GPP-Grep: High-speed regular expression processing engine on general purpose processors | |
| Chang et al. | The cost effective pre-processing based NFA pattern matching architecture for NIDS | |
| Hieu et al. | mdfa: A memory efficient dfa-based pattern matching engine on fpga | |
| Chen et al. | A regular expression matching engine with hybrid memories |