See this document in CiteSeerX!

Fast, Large-Scale String Match for a 10Gbps Fpga-Based Network Intrusion (2003)  (Make Corrections)  
Ioannis Sourdis, Dionisios Pnevmatikatos



  Home/Search   Context   Related

 
View or download:
ce.et.tudelft.nl/p..._Sourdis_final.pdf
Cached:  PS.gz  PS  PDF   Image  Update  Help

From:  ce.et.tudelft.n....php?author=564 (more)
(Enter author homepages)

Rate this article: (best)
  Comment on this article  
(Enter summary)

Abstract: Intrusion Detection Systems such as Snort scan incoming packets for evidence of security threats. The most computation-intensive part of these systems is a text search against hundreds of patterns, and must be performed at wire-speed. FPGAs are particularly well suited for this task and several such systems have been proposed. In this paper we expand on previous work, in order to achieve and exceed a processing bandwidth of 11Gbps. We employ a scalable, low-latency architecture, and use... (Update)

Active bibliography (related documents):   More   All
1.0:   Pre-decoded CAMs for Efficient and High-Speed NIDS Pattern.. - Sourdis, Pnevmatikatos (2004)   (Correct)
0.4:   Exploiting Reconfigurable Hardware for Network Security - Li, Torresen, Soraasen (2003)   (Correct)
0.3:   Automatic Synthesis of Efficient Intrusion Detection Systems.. - Baker, Prasanna (2004)   (Correct)

Similar documents based on text:
3.0:   Unknown -   (Correct)

BibTeX entry:   (Update)

@misc{ sourdis-fast,
  author = "Ioannis Sourdis and Dionisios Pnevmatikatos",
  title = "Fast, Large-Scale String Match for a 10Gbps Fpga-Based Network Intrusion",
  url = "citeseer.ist.psu.edu/sourdis03fast.html" }
Citations (may not include all citations):
140   Snort - lightweight intrusion detection for networks (context) - Roesch - 1999
24   Fast regular expression matching using fpgas - Sidhu, Prasanna - 2001
22   Implementation of a contentscanning module for an internet f.. - Moscola, Lockwood et al. - 2003
18   Assisting network intrusion detection with reconfigurable ha.. (context) - Franklin, Carver et al. - 2002
17   An open platform for development of network processing modul.. - Lockwood - 2001
11   Towards faster string matching for intrusion detection or ex.. (context) - Coit, Staniford et al. - 2001
9   Text searching on splash (context) - Pryor, Thistle et al. - 1993
8   Granidt: Towards gigabit rate network intrusion detection te.. (context) - Gokhale, Dubois et al. - 2002
7   Specialized hardware for deep network packet filtering - Cho, Mangione-Smith - 2002
3   Increasing performance in high speed NIDS (context) - Desai - 2002
http://www.snort.org

Documents on the same site (http://ce.et.tudelft.nl/publications.php?author=564):   More
Efficient Field Processing Cores in an Innovative.. - Lykakis Mouratidis.. (2003)   (Correct)
An Efficient and Low-Cost Input/Output Subsystem for.. - Sourdis.. (2002)   (Correct)
An Efficient and Low-Cost I/O Subsystem for Network.. - Pnevmatikatos, Sourdis.. (2003)   (Correct)

Online articles have much greater impact   More about CiteSeer.IST   Add search form to your site   Submit documents   Feedback  

CiteSeer.IST - Copyright Penn State and NEC