Parallelization of Snort on a multi-core platform

Authors:
Benjamin Wun;Patrick Crowley;Arun Raghunth
Affiliations:
Washington University;Washington University;Intel
Venue:
Proceedings of the 5th ACM/IEEE Symposium on Architectures for Networking and Communications Systems
Year:
2009

Citing 4
Cited 1

Snort - Lightweight Intrusion Detection for Networks

LISA '99 Proceedings of the 13th USENIX conference on System administration
SIFT: Snort Intrusion Filter for TCP

HOTI '05 Proceedings of the 13th Symposium on High Performance Interconnects
Conservative vs. optimistic parallelization of stateful network intrusion detection

Proceedings of the 12th ACM SIGPLAN symposium on Principles and practice of parallel programming
Improving the performance of signature-based network intrusion detection sensors by multi-threading

WISA'04 Proceedings of the 5th international conference on Information Security Applications

Fast asymmetric thread synchronization

ACM Transactions on Architecture and Code Optimization (TACO) - Special Issue on High-Performance Embedded Architectures and Compilers

Quantified Score

Hi-index	0.00

Visualization

Abstract

We design and test a multithreaded Snort which uses flow pinning as a major optimization. The insights derived in improving Snort's performance will apply generally to any parallel networking application that uses flow pinning as an optimization.