Deep Packet Inspection using Parallel Bloom Filters

Authors:
Sarang Dharmapurikar;Praveen Krishnamurthy;Todd S. Sproull;John W. Lockwood
Affiliations:
Washington University in St. Louis;Washington University in St. Louis;Washington University in St. Louis;Washington University in St. Louis
Venue:
IEEE Micro
Year:
2004

Citing 0
Cited 78

IPSec Implementation on Xilinx Virtex-II Pro FPGA and Its Application

IPDPS '05 Proceedings of the 19th IEEE International Parallel and Distributed Processing Symposium (IPDPS'05) - Workshop 3 - Volume 04
A High Throughput String Matching Architecture for Intrusion Detection and Prevention

Proceedings of the 32nd annual international symposium on Computer Architecture
SSA: a power and memory efficient scheme to multi-match packet classification

Proceedings of the 2005 ACM symposium on Architecture for networking and communications systems
Architectures for Bit-Split String Scanning in Intrusion Detection

IEEE Micro
Bit-split string-matching engines for intrusion detection and prevention

ACM Transactions on Architecture and Code Optimization (TACO)
A Scalable Architecture For High-Throughput Regular-Expression Pattern Matching

Proceedings of the 33rd annual international symposium on Computer Architecture
Reducing energy of virtual cache synonym lookup using bloom filters

CASES '06 Proceedings of the 2006 international conference on Compilers, architecture and synthesis for embedded systems
Advanced algorithms for fast and scalable deep packet inspection

Proceedings of the 2006 ACM/IEEE symposium on Architecture for networking and communications systems
Fast and memory-efficient regular expression matching for deep packet inspection

Proceedings of the 2006 ACM/IEEE symposium on Architecture for networking and communications systems
Memory-efficient content filtering hardware for high-speed intrusion detection systems

Proceedings of the 2007 ACM symposium on Applied computing
A platform-based SoC design and implementation of scalable automaton matching for deep packet inspection

Journal of Systems Architecture: the EUROMICRO Journal
Deterministic high-speed root-hashing automaton matching coprocessor for embedded network processor

ACM SIGARCH Computer Architecture News - Special issue on the 2006 reconfigurable and adaptive architecture workshop
Biosequence Similarity Search on the Mercury System

Journal of VLSI Signal Processing Systems
High-speed detection of unsolicited bulk emails

Proceedings of the 3rd ACM/IEEE Symposium on Architecture for networking and communications systems
Language classification using n-grams accelerated by FPGA-based Bloom filters

HPRCTA '07 Proceedings of the 1st international workshop on High-performance reconfigurable computing technology and applications: held in conjunction with SC07
Deep network packet filter design for reconfigurable devices

ACM Transactions on Embedded Computing Systems (TECS)
Implementing high-speed string matching hardware for network intrusion detection systems

Proceedings of the 16th international ACM/SIGDA symposium on Field programmable gate arrays
Why simple hash functions work: exploiting the entropy in a data stream

Proceedings of the nineteenth annual ACM-SIAM symposium on Discrete algorithms
Exact multi-pattern string matching on the cell/b.e. processor

Proceedings of the 5th conference on Computing frontiers
Scalable multigigabit pattern matching for packet inspection

IEEE Transactions on Very Large Scale Integration (VLSI) Systems
Gnort: High Performance Network Intrusion Detection Using Graphics Processors

RAID '08 Proceedings of the 11th international symposium on Recent Advances in Intrusion Detection
Power efficient packet classification using cascaded bloom filter and off-the-shelf ternary CAM for WDM networks

Computer Communications
Session management architecture for implementing an FPGA-based stateful intrusion detection system

ACS'08 Proceedings of the 8th conference on Applied computer scince
A fast scalable automaton-matching accelerator for embedded content processors

ACM Transactions on Embedded Computing Systems (TECS)
Adaptive Bloom Filter: A Space-Efficient Counting Algorithm for Unpredictable Network Traffic

IEICE - Transactions on Information and Systems
High-performance regular expression scanning on the Cell/B.E. processor

Proceedings of the 23rd international conference on Supercomputing
Performance Improvement by Means of Collaboration between Network Intrusion Detection Systems

CNSR '09 Proceedings of the 2009 Seventh Annual Communication Networks and Services Research Conference
Reconfigurable Computing: The Theory and Practice of FPGA-Based Computation

Reconfigurable Computing: The Theory and Practice of FPGA-Based Computation
High-speed string matching for network intrusion detection

International Journal of Communication Networks and Distributed Systems
High-performance multi-pattern matching structure in hardware network firewall

AIC'09 Proceedings of the 9th WSEAS international conference on Applied informatics and communications
Memory-efficient distribution of regular expressions for fast deep packet inspection

CODES+ISSS '09 Proceedings of the 7th IEEE/ACM international conference on Hardware/software codesign and system synthesis
Optimized memory based accelerator for scalable pattern matching

Microprocessors & Microsystems
SCAMPI: a scalable CAM-based algorithm for multiple pattern inspection

Proceedings of the Conference on High Performance Computing Networking, Storage and Analysis
Self-addressable memory-based FSM: a scalable intrusion detection engine

IEEE Network: The Magazine of Global Internetworking - Special issue title on recent developments in network intrusion detection
Counting bloom filters for pattern matching and anti- evasion at the wire speed

IEEE Network: The Magazine of Global Internetworking - Special issue title on recent developments in network intrusion detection
A scalable bloom filter based prefilter and hardware-orientedpredispatcher

INFOCOM'09 Proceedings of the 28th IEEE international conference on Computer Communications Workshops
Realizing a sub-linear time string-matching algorithm with a hardware accelerator using bloom filters

IEEE Transactions on Very Large Scale Integration (VLSI) Systems
Distributed instrusion prevention in active and extensible networks

IWAN'04 Proceedings of the 6th IFIP TC6 international working conference on Active networks
Scalable NIDS via negative pattern matching and exclusive pattern matching

INFOCOM'10 Proceedings of the 29th conference on Information communications
Measurouting: a framework for routing assisted traffic monitoring

INFOCOM'10 Proceedings of the 29th conference on Information communications
A memory-efficient pipelined implementation of the aho-corasick string-matching algorithm

ACM Transactions on Architecture and Code Optimization (TACO)
Accelerating the bit-split string matching algorithm using Bloom filters

Computer Communications
Design and implementation of the PLUG architecture for programmable and efficient network lookups

Proceedings of the 19th international conference on Parallel architectures and compilation techniques
SplitScreen: enabling efficient, distributed malware detection

NSDI'10 Proceedings of the 7th USENIX conference on Networked systems design and implementation
Real-time memory efficient data redundancy removal algorithm

CIKM '10 Proceedings of the 19th ACM international conference on Information and knowledge management
Range hash for regular expression pre-filtering

Proceedings of the 6th ACM/IEEE Symposium on Architectures for Networking and Communications Systems
LaFA: lookahead finite automata for scalable regular expression detection

Proceedings of the 5th ACM/IEEE Symposium on Architectures for Networking and Communications Systems
LaFA: lookahead finite automata for scalable regular expression detection

Proceedings of the 5th ACM/IEEE Symposium on Architectures for Networking and Communications Systems
Improving retouched Bloom filter for trading off selected false positives against false negatives

Computer Networks: The International Journal of Computer and Telecommunications Networking
GrAVity: a massively parallel antivirus engine

RAID'10 Proceedings of the 13th international conference on Recent advances in intrusion detection
SigMatch: fast and scalable multi-pattern matching

Proceedings of the VLDB Endowment
Integrity of the web content: the case of online advertising

CollSec'10 Proceedings of the 2010 international conference on Collaborative methods for security and privacy
High throughput data redundancy removal algorithm with scalable performance

Proceedings of the 6th International Conference on High Performance and Embedded Architectures and Compilers
BBFEX: a bloom-bloomier filter extension for long patterns in FPGA-based pattern matching system (abstract only)

Proceedings of the 19th ACM/SIGDA international symposium on Field programmable gate arrays
Real-time approximate Range Motif discovery & data redundancy removal algorithm

Proceedings of the 14th International Conference on Extending Database Technology
Deterministic finite automata characterization and optimization for scalable pattern matching

ACM Transactions on Architecture and Code Optimization (TACO)
Enhancing counting bloom filters through Huffman-coded multilayer structures

IEEE/ACM Transactions on Networking (TON)
Deep packet pre-filtering and finite state encoding for adaptive intrusion detection system

Computer Networks: The International Journal of Computer and Telecommunications Networking
A Generalized Bloom Filter to Secure Distributed Network Applications

Computer Networks: The International Journal of Computer and Telecommunications Networking
Fast, memory-efficient regular expression matching with NFA-OBDDs

Computer Networks: The International Journal of Computer and Telecommunications Networking
MIDeA: a multi-parallel intrusion detection architecture

Proceedings of the 18th ACM conference on Computer and communications security
LEISURE: A Framework for Load-Balanced Network-Wide Traffic Measurement

Proceedings of the 2011 ACM/IEEE Seventh Symposium on Architectures for Networking and Communications Systems
A fast pattern-matching algorithm for network intrusion detection system

NETWORKING'06 Proceedings of the 5th international IFIP-TC6 conference on Networking Technologies, Services, and Protocols; Performance of Computer and Communication Networks; Mobile and Wireless Communications Systems
RIDA: robust intrusion detection in ad hoc networks

NETWORKING'05 Proceedings of the 4th IFIP-TC6 international conference on Networking Technologies, Services, and Protocols; Performance of Computer and Communication Networks; Mobile and Wireless Communication Systems
Pattern matching acceleration for network intrusion detection systems

SAMOS'05 Proceedings of the 5th international conference on Embedded Computer Systems: architectures, Modeling, and Simulation
String alignment pre-detection using unique subsequences for FPGA-based network intrusion detection

Computer Communications
Smart architecture for high-speed intrusion detection and prevention systems

CANS'06 Proceedings of the 5th international conference on Cryptology and Network Security
MeasuRouting: a framework for routing assisted traffic monitoring

IEEE/ACM Transactions on Networking (TON)
Scalable lookahead regular expression detection system for deep packet inspection

IEEE/ACM Transactions on Networking (TON)
A property-based technique for tolerating faults in bloom filters for deep packet inspection

ATC'07 Proceedings of the 4th international conference on Autonomic and Trusted Computing
LEAP: latency- energy- and area-optimized lookup pipeline

Proceedings of the eighth ACM/IEEE symposium on Architectures for networking and communications systems
Duplicate detection in pay-per-click streams using temporal stateful Bloom filters

International Journal of Data Analysis Techniques and Strategies
Fast and deterministic hash table lookup using discriminative bloom filters

Journal of Network and Computer Applications
EnGarde: protecting the mobile phone from malicious NFC interactions

Proceeding of the 11th annual international conference on Mobile systems, applications, and services
A scalable high-performance virus detection processor against a large pattern set for embedded network security

IEEE Transactions on Very Large Scale Integration (VLSI) Systems
A pattern-matching scheme with high throughput performance and low memory requirement

IEEE/ACM Transactions on Networking (TON)
Streaming quotient filter: a near optimal approximate duplicate detection approach for data streams

Proceedings of the VLDB Endowment
Survey Bloom filter applications in network security: A state-of-the-art survey

Computer Networks: The International Journal of Computer and Telecommunications Networking

Quantified Score

Hi-index	0.00

Visualization

Abstract

Because conventional software-based packet inspection algorithms have not kept pace with high-speed networks, interest has turned to using hardware to process network data quickly. String scanning with Bloom filters can scan entire packet payloads for predefined signatures at multi-gigabit-per-second line speeds.