Massive threading: Using GPUs to increase the performance of digital forensics tools

Authors:
Lodovico Marziale;Golden G. Richard, III;Vassil Roussev
Affiliations:
Department of Computer Science, University of New Orleans, New Orleans, LA 70148, United States;Department of Computer Science, University of New Orleans, New Orleans, LA 70148, United States;Department of Computer Science, University of New Orleans, New Orleans, LA 70148, United States
Venue:
Digital Investigation: The International Journal of Digital Forensics & Incident Response
Year:
2007

Citing 4
Cited 6

Fast computation of database operations using graphics processors

SIGMOD '04 Proceedings of the 2004 ACM SIGMOD international conference on Management of data
GPU Cluster for High Performance Computing

Proceedings of the 2004 ACM/IEEE conference on Supercomputing
A performance-oriented data parallel virtual machine for GPUs

ACM SIGGRAPH 2006 Sketches
Offloading IDS Computation to the GPU

ACSAC '06 Proceedings of the 22nd Annual Computer Security Applications Conference

Gnort: High Performance Network Intrusion Detection Using Graphics Processors

RAID '08 Proceedings of the 11th international symposium on Recent Advances in Intrusion Detection
Stream processing for fast and efficient rotated Haar-like features using rotated integral images

International Journal of Intelligent Systems Technologies and Applications
A Hybrid Parallel Signature Matching Model for Network Security Applications Using SIMD GPU

APPT '09 Proceedings of the 8th International Symposium on Advanced Parallel Processing Technologies
Regular Expression Matching on Graphics Hardware for Intrusion Detection

RAID '09 Proceedings of the 12th International Symposium on Recent Advances in Intrusion Detection
Orders-of-magnitude performance increases in GPU-accelerated correlation of images from the International Space Station

Journal of Real-Time Image Processing
Robust performance testing for digital forensic tools

Digital Investigation: The International Journal of Digital Forensics & Incident Response

Quantified Score

Hi-index	0.00

Visualization

Abstract

The current generation of Graphics Processing Units (GPUs) contains a large number of general purpose processors, in sharp contrast to previous generation designs, where special-purpose hardware units (such as texture and vertex shaders) were commonly used. This fact, combined with the prevalence of multicore general purpose CPUs in modern workstations, suggests that performance-critical software such as digital forensics tools be ''massively'' threaded to take advantage of all available computational resources. Several trends in digital forensics make the availability of more processing power very important. These trends include a large increase in the average size (measured in bytes) of forensic targets, an increase in the number of digital forensics cases, and the development of ''next-generation'' tools that require more computational resources. This paper presents the results of a number of experiments that evaluate the effectiveness of offloading processing common to digital forensics tools to a GPU, using ''massive'' numbers of threads to parallelize the computation. These results are compared to speedups obtainable by simple threading schemes appropriate for multicore CPUs. Our results indicate that in many cases, the use of GPUs can substantially increase the performance of digital forensics tools.