A multi-gigabit virus detection algorithm using ternary CAM

Authors:
Il-Seop Song;Youngseok Lee;Taeck-Geun Kwon
Affiliations:
Dept. of Computer Engineering, Chungnam National University, Deajeon, Korea;Dept. of Computer Engineering, Chungnam National University, Deajeon, Korea;Dept. of Computer Engineering, Chungnam National University, Deajeon, Korea
Venue:
CIS'05 Proceedings of the 2005 international conference on Computational Intelligence and Security - Volume Part II
Year:
2005

Citing 3
Cited 0

Routing Table Compaction in Ternary CAM

IEEE Micro
Gigabit Rate Packet Pattern-Matching Using TCAM

ICNP '04 Proceedings of the 12th IEEE International Conference on Network Protocols
TCAM Architecture for IP Lookup Using Prefix Properties

IEEE Micro

Quantified Score

Hi-index	0.00

Visualization

Abstract

During the last few years, the number of Internet worms and viruses has significantly increased. For the fast detection of Internet worms/viruses, the signature-based scheme with TCAM is necessary for the network intrusion detection system (NIDS). However, due to the limit of the TCAM size, all the signatures of Internet worms/viruses cannot be stored. Hence, we propose a two-phase content inspection algorithm which can support a large number of long signatures at TCAM. From the simulation results, it is shown that our algorithm for TCAM provides a fast virus-detection capability at line rate of 10Gbps (OC192).