Application of hardware accelerated extensible network nodes for Internet worm and virus protection (2003) [6 citations — 3 self]
Abstract:
Abstract. Today’s crucial information networks are vulnerable to fastmoving attacks by Internet worms and computer viruses. These attacks have the potential to cripple the Internet and compromise the integrity of the data on the end-user machines. Without new types of protection, the Internet remains susceptible to the assault of increasingly aggressive attacks. A platform has been implemented that actively detects and blocks worms and viruses at multi-Gigabit/second rates. It uses the Field-programmable Port Extender (FPX) to scan for signatures of malicious software (malware) carried in packet payloads. Dynamically reconfigurable Field Programmable Gate Array (FPGA) logic tracks the state of Internet flows and searches for regular expressions and fixedstrings that appear in the content of packets. Protection is achieved by the incremental deployment of systems throughout the Internet.
Citations
| 431 | Snort- lightweight intrusion detection for networks – Roesch - 1978 |
| 314 | How to Own the Internet in Your Spare Time – Staniford, Paxson, et al. - 2002 |
| 167 | Internet quarantine: Requirements for containing self-propagating code – Moore, Shannon, et al. - 2003 |
| 38 | The EarlyBird System for Real-time Detection of Unknown Worms – Singh, Estan, et al. |
| 22 | Characterizing the Performance of Network Intrusion Detection Sensors – Schaelicke, Slabach, et al. - 2003 |
| 16 | Malware: Fighting Malicious Code – Skoudis, Zeltser - 2003 |
| 15 | Internet worm and virus protection in dynamically reconfigurable hardware – Lockwood, Moscola, et al. - 2003 |
| 1 | Director of CERT Coordination Center, “Subcommittee on – Pethia - 2003 |
