A Hybrid Parallel Signature Matching Model for Network Security Applications Using SIMD GPU

Authors:
Chengkun Wu;Jianping Yin;Zhiping Cai;En Zhu;Jieren Chen
Affiliations:
School of Computer Science, National University of Defense Technology, Hunan Province, China 410073;School of Computer Science, National University of Defense Technology, Hunan Province, China 410073;School of Computer Science, National University of Defense Technology, Hunan Province, China 410073;School of Computer Science, National University of Defense Technology, Hunan Province, China 410073;School of Computer Science, National University of Defense Technology, Hunan Province, China 410073
Venue:
APPT '09 Proceedings of the 8th International Symposium on Advanced Parallel Processing Technologies
Year:
2009

Citing 11
Cited 1

Efficient string matching: an aid to bibliographic search

Communications of the ACM
Generating realistic workloads for network intrusion detection systems

WOSP '04 Proceedings of the 4th international workshop on Software and performance
Scalable Pattern Matching for High Speed Networks

FCCM '04 Proceedings of the 12th Annual IEEE Symposium on Field-Programmable Custom Computing Machines
Gigabit Rate Packet Pattern-Matching Using TCAM

ICNP '04 Proceedings of the 12th IEEE International Conference on Network Protocols
A High Throughput String Matching Architecture for Intrusion Detection and Prevention

Proceedings of the 32nd annual international symposium on Computer Architecture
A Fast Multi-pattern Matching Algorithm for Deep Packet Inspection on a Network Processor

ICPP '07 Proceedings of the 2007 International Conference on Parallel Processing
High Speed Pattern Matching for Network IDS/IPS

ICNP '06 Proceedings of the Proceedings of the 2006 IEEE International Conference on Network Protocols
Deflating the big bang: fast and scalable deep packet inspection with extended finite automata

Proceedings of the ACM SIGCOMM 2008 conference on Data communication
Gnort: High Performance Network Intrusion Detection Using Graphics Processors

RAID '08 Proceedings of the 11th international symposium on Recent Advances in Intrusion Detection
Massive threading: Using GPUs to increase the performance of digital forensics tools

Digital Investigation: The International Journal of Digital Forensics & Incident Response
Fast and Scalable Pattern Matching for Network Intrusion Detection Systems

IEEE Journal on Selected Areas in Communications

GrAVity: a massively parallel antivirus engine

RAID'10 Proceedings of the 13th international conference on Recent advances in intrusion detection

Quantified Score

Hi-index	0.00

Visualization

Abstract

High performance signature matching against a large dictionary is of great importance in network security applications. The many-core SIMD GPU is a competitive choice for signature matching. In this paper, a hybrid parallel signature matching model (HPSMM) using SIMD GPU is proposed, which uses pattern set partition and input text partition together. Then the problem of load balancing for multiprocessors in the GPU is discussed carefully, and a balanced pattern set partition method (BPSPM) employed in HPSMM is introduced. Experiments demonstrate that using pattern set partition and input text partition together can help achieve a better performance, and the proposed BPSPM-Length works well in load balancing.