Abstract — In this paper we present a hardware architecture for string matching. Our solution based on using a Bloom filter based pre-processor and a parallelized hashing engine is capable of handling wire line speeds with zero false-positive probability. String matching modules are extensively used in the network security domain especially in network intrusion detection systems where they are required to operate at wire line speeds. Our analysis shows that our system is capable of matching 16000 strings and achieves throughput in excess of 100Gbps (i.e. capable of handling 10 OC−192 links comfortably)
International audienceThis paper presents a new high performance hardware implementation of a string...
International audienceThis paper presents a new high performance hardware implementation of a string...
International audienceThis paper presents a new high performance hardware implementation of a string...
Although software based techniques are widely accepted in computer security systems, there is a grow...
Network Intrusion Detection and Prevention Systems (IDPS) use string matching to scan Internet packe...
Modern Network Intrusion Detection Systems (NIDS) inspect the network packet payload to check if it ...
Modern Network Intrusion Detection Systems (NIDS) inspect the network packet payload to check if it ...
Intrusion detection systems are promising techniques to improve internet security. A daunting challe...
Many fields of computing such as Deep Packet Inspection (DPI) employ string matching modules (SMM) t...
Abstract. Network security is very important for Internet-connected hosts because of the widespread ...
Network security is very important for Internet-connected hosts because of the widespread of worms, ...
Systems (IDSs) monitor network traffic for security threats by scanning packet payloads for attack s...
This paper describes a finite state machine approach to string matching for an intrusion detection s...
Network Intrusion Detection and Prevention Systems have emerged as one of the most effective ways of...
International audienceThis paper presents a new high performance hardware implementation of a string...
International audienceThis paper presents a new high performance hardware implementation of a string...
International audienceThis paper presents a new high performance hardware implementation of a string...
International audienceThis paper presents a new high performance hardware implementation of a string...
Although software based techniques are widely accepted in computer security systems, there is a grow...
Network Intrusion Detection and Prevention Systems (IDPS) use string matching to scan Internet packe...
Modern Network Intrusion Detection Systems (NIDS) inspect the network packet payload to check if it ...
Modern Network Intrusion Detection Systems (NIDS) inspect the network packet payload to check if it ...
Intrusion detection systems are promising techniques to improve internet security. A daunting challe...
Many fields of computing such as Deep Packet Inspection (DPI) employ string matching modules (SMM) t...
Abstract. Network security is very important for Internet-connected hosts because of the widespread ...
Network security is very important for Internet-connected hosts because of the widespread of worms, ...
Systems (IDSs) monitor network traffic for security threats by scanning packet payloads for attack s...
This paper describes a finite state machine approach to string matching for an intrusion detection s...
Network Intrusion Detection and Prevention Systems have emerged as one of the most effective ways of...
International audienceThis paper presents a new high performance hardware implementation of a string...
International audienceThis paper presents a new high performance hardware implementation of a string...
International audienceThis paper presents a new high performance hardware implementation of a string...
International audienceThis paper presents a new high performance hardware implementation of a string...