Proceedings of the seventeenth ACM symposium on Operating systems principles
Efficient string matching: an aid to bibliographic search
Communications of the ACM
VERA: an extensible router architecture
Computer Networks: The International Journal of Computer and Telecommunications Networking - Special issue on programmable networks
A Fast Pattern-Match Engine for Network Processor-based Network Intrusion Detection System
ITCC '04 Proceedings of the International Conference on Information Technology: Coding and Computing (ITCC'04) Volume 2 - Volume 2
Snort - Lightweight Intrusion Detection for Networks
LISA '99 Proceedings of the 13th USENIX conference on System administration
Fast Regular Expression Matching Using FPGAs
FCCM '01 Proceedings of the the 9th Annual IEEE Symposium on Field-Programmable Custom Computing Machines
Proceedings of the 2005 ACM SIGPLAN conference on Programming language design and implementation
A pattern matching coprocessor for network security
Proceedings of the 42nd annual Design Automation Conference
Fast and scalable pattern matching for content filtering
Proceedings of the 2005 ACM symposium on Architecture for networking and communications systems
Fast and memory-efficient regular expression matching for deep packet inspection
Proceedings of the 2006 ACM/IEEE symposium on Architecture for networking and communications systems
NetPDL: An extensible XML-based language for packet header description
Computer Networks: The International Journal of Computer and Telecommunications Networking
Task partitioning for multi-core network processors
CC'05 Proceedings of the 14th international conference on Compiler Construction
| Hi-index | 0.01 |
In the wide scenario of packet processing architectures, the development of ever sophisticated applications faces the challenge of finding a balance between different requirements: ever increasing performance, flexibility, and portability of the software across different platforms and hardware architectures. The Network Virtual Machine (NetVM) aims at responding to such defy by taking into account all these elements and by providing an abstract architecture for developing today's packet processing applications. In order to demonstrate that the NetVM platform can be profitably employed for the development of complex applications, we developed a Snort-like network intrusion detection sensor. In this paper we present its architecture and show that NetVM represents an excellent target for the dynamic generation of packet processing programs.