Implementation Results of Bloom Filters for String Matching

Network Intrusion Detection and Prevention Systems (IDPS) use string matching to scan Internet packets for ma-licious content. Bloom filters offer a mechanism to search for a large number of strings efficiently and concurrently when implemented with Field Programmable Gate Array (FPGA) technology. A string matching circuit has been im-plemented within the FPX platform using Bloom filters. Us-ing 155 block RAMs on a single Xilinx VirtexE 2000 FPGA, the circuit scans for 35,475 unique signatures.