Paper Info
Title
A Novel Algorithm and Architecture for High Speed Pattern Matching in Resource-Limited Silicon Solution
Abstract
Network intrusion detection systems (NIDS) are more and more important for identifying and preventing the malicious attacks over the network. This paper proposes a novel cost-effective high speed pattern matching algorithm (named MSH) for NIDS. By applying the characteristics of magic states, a new observation from the deterministic finite state automata (DFA), the proposed MSH constructs a tiny data structure which can be stored into the on-chip memory of modern cost effective FPGA. Prototype and experimental results show the overall efficiency of the proposed MSH is at least 7 times faster than that of the baseline model. The MSH enables the design of cost effective FPGA-based accelerator to furnish over 1 Gbps throughput. It can also be scaled to multi-gigabit and realized on various silicon implementations.
Year
DOI
Venue
2007
10.1109/ICC.2007.217
ICC
Keywords
Field
DocType
finite state machines,network intrusion detection systems,deterministic finite state automata,high speed pattern matching,resource-limited silicon solution,malicious attacks,field programmable gate arrays,fpga-based accelerator,on-chip memory,security of data,indexing terms,network security,automata,throughput,silicon,chip,cost effectiveness,data structures,intrusion detection,data structure,prototypes,string matching,pattern matching
String searching algorithm,Data structure,Computer science,Network security,Computer network,Field-programmable gate array,Real-time computing,Finite-state machine,Throughput,Intrusion detection system,Pattern matching
Conference
ISSN
ISBN
Citations 
1550-3607
1-4244-0353-7
2
PageRank 
References 
Authors
0.43
13
5
Name
Order
Citations
PageRank
Nen-Fu Huang162072.93
Yen-Ming Chu2708.06
Chi-Hung Tsai31168.70
Chen-Ying Hsieh441.15
Yih-Jou Tzang5505.33