Implementation of a Content-Scanning Module for an Internet Firewall

Authors:
James Moscola;John Lockwood;Ronald P. Loui;Michael Pachos
Affiliations:
-;-;-;-
Venue:
FCCM '03 Proceedings of the 11th Annual IEEE Symposium on Field-Programmable Custom Computing Machines
Year:
2003

Citing 0
Cited 70

Automated tools to implement and test Internet systems in reconfigurable hardware

ACM SIGCOMM Computer Communication Review
Time and area efficient pattern matching on FPGAs

FPGA '04 Proceedings of the 2004 ACM/SIGDA 12th international symposium on Field programmable gate arrays
A Hardware-Accelerated System for Real-Time Worm Detection

IEEE Micro
IPSec Implementation on Xilinx Virtex-II Pro FPGA and Its Application

IPDPS '05 Proceedings of the 19th IEEE International Parallel and Distributed Processing Symposium (IPDPS'05) - Workshop 3 - Volume 04
High-throughput linked-pattern matching for intrusion detection systems

Proceedings of the 2005 ACM symposium on Architecture for networking and communications systems
Modeling the data-dependent performance of pattern-matching architectures

Proceedings of the 2006 ACM/SIGDA 14th international symposium on Field programmable gate arrays
Optimization of regular expression pattern matching circuits on FPGA

Proceedings of the conference on Design, automation and test in Europe: Designers' forum
Algorithms to accelerate multiple regular expressions matching for deep packet inspection

Proceedings of the 2006 conference on Applications, technologies, architectures, and protocols for computer communications
Advanced algorithms for fast and scalable deep packet inspection

Proceedings of the 2006 ACM/IEEE symposium on Architecture for networking and communications systems
Fast and memory-efficient regular expression matching for deep packet inspection

Proceedings of the 2006 ACM/IEEE symposium on Architecture for networking and communications systems
Packet pre-filtering for network intrusion detection

Proceedings of the 2006 ACM/IEEE symposium on Architecture for networking and communications systems
A system architecture for high-speed deep packet inspection in signature-based network intrusion prevention

Journal of Systems Architecture: the EUROMICRO Journal
Memory-efficient content filtering hardware for high-speed intrusion detection systems

Proceedings of the 2007 ACM symposium on Applied computing
A high performance NIDS using FPGA-based regular expression matching

Proceedings of the 2007 ACM symposium on Applied computing
Remote testing and diagnosis of System-on-Chips using network management frameworks

Proceedings of the conference on Design, automation and test in Europe
A platform-based SoC design and implementation of scalable automaton matching for deep packet inspection

Journal of Systems Architecture: the EUROMICRO Journal
Deterministic high-speed root-hashing automaton matching coprocessor for embedded network processor

ACM SIGARCH Computer Architecture News - Special issue on the 2006 reconfigurable and adaptive architecture workshop
Optimization of pattern matching algorithm for memory based architecture

Proceedings of the 3rd ACM/IEEE Symposium on Architecture for networking and communications systems
Compiling PCRE to FPGA for accelerating SNORT IDS

Proceedings of the 3rd ACM/IEEE Symposium on Architecture for networking and communications systems
An improved algorithm to accelerate regular expression evaluation

Proceedings of the 3rd ACM/IEEE Symposium on Architecture for networking and communications systems
Curing regular expressions matching algorithms from insomnia, amnesia, and acalculia

Proceedings of the 3rd ACM/IEEE Symposium on Architecture for networking and communications systems
High-speed detection of unsolicited bulk emails

Proceedings of the 3rd ACM/IEEE Symposium on Architecture for networking and communications systems
Deep network packet filter design for reconfigurable devices

ACM Transactions on Embedded Computing Systems (TECS)
Reconfigurable content-based router using hardware-accelerated language parser

ACM Transactions on Design Automation of Electronic Systems (TODAES)
C is for circuits: capturing FPGA circuits as sequential code for portability

Proceedings of the 16th international ACM/SIGDA symposium on Field programmable gate arrays
Novel FPGA-based signature match circuit for efficient network intrusion detection

ACOS'07 Proceedings of the 6th Conference on WSEAS International Conference on Applied Computer Science - Volume 6
Regular Expression Matching in Reconfigurable Hardware

Journal of Signal Processing Systems
Hardware implementation for network intrusion detection rules with regular expression support

Proceedings of the 2008 ACM symposium on Applied computing
A hybrid finite automaton for practical deep packet inspection

CoNEXT '07 Proceedings of the 2007 ACM CoNEXT conference
Exact multi-pattern string matching on the cell/b.e. processor

Proceedings of the 5th conference on Computing frontiers
Optimization of pattern matching circuits for regular expression on FPGA

IEEE Transactions on Very Large Scale Integration (VLSI) Systems
Scalable multigigabit pattern matching for packet inspection

IEEE Transactions on Very Large Scale Integration (VLSI) Systems
FPGA based string matching for network processing applications

Microprocessors & Microsystems
Multilevel Pattern Matching Architecture for Network Intrusion Detection and Prevention System

ICESS '07 Proceedings of the 3rd international conference on Embedded Software and Systems
Highly Space Efficient Counters for Perl Compatible Regular Expressions in FPGAs

ARC '08 Proceedings of the 4th international workshop on Reconfigurable Computing: Architectures, Tools and Applications
Efficient regular expression evaluation: theory to practice

Proceedings of the 4th ACM/IEEE Symposium on Architectures for Networking and Communications Systems
An efficient multi-hash pattern matching scheme for intrusion detection in FPGA-based reconfiguring hardware

ACS'08 Proceedings of the 8th conference on Applied computer scince
A fast scalable automaton-matching accelerator for embedded content processors

ACM Transactions on Embedded Computing Systems (TECS)
Hierarchical state machine architecture for regular expression pattern matching

Proceedings of the 19th ACM Great Lakes symposium on VLSI
High-performance regular expression scanning on the Cell/B.E. processor

Proceedings of the 23rd international conference on Supercomputing
FPGA-based ROM-free network intrusion detection using shift-OR circuit

Journal of Embedded Computing - Design and Optimization for High Performance Embedded Systems
Reconfigurable Computing: The Theory and Practice of FPGA-Based Computation

Reconfigurable Computing: The Theory and Practice of FPGA-Based Computation
Space Optimization on Counters for FPGA-Based Perl Compatible Regular Expressions

ACM Transactions on Reconfigurable Technology and Systems (TRETS)
Memory-efficient distribution of regular expressions for fast deep packet inspection

CODES+ISSS '09 Proceedings of the 7th IEEE/ACM international conference on Hardware/software codesign and system synthesis
Optimized memory based accelerator for scalable pattern matching

Microprocessors & Microsystems
Regular Expression Matching on Graphics Hardware for Intrusion Detection

RAID '09 Proceedings of the 12th International Symposium on Recent Advances in Intrusion Detection
Systolic array for string matching in NIDS

AsiaCSN '07 Proceedings of the Fourth IASTED Asian Conference on Communication Systems and Networks
Realizing a sub-linear time string-matching algorithm with a hardware accelerator using bloom filters

IEEE Transactions on Very Large Scale Integration (VLSI) Systems
A modular NFA architecture for regular expression matching

Proceedings of the 18th annual ACM/SIGDA international symposium on Field programmable gate arrays
Variable Length Pattern Matching for Hardware Network Intrusion Detection System

Journal of Signal Processing Systems
Synthesis of regular expressions targeting FPGAs: current status and open issues

ARC'07 Proceedings of the 3rd international conference on Reconfigurable computing: architectures, tools and applications
GrAVity: a massively parallel antivirus engine

RAID'10 Proceedings of the 13th international conference on Recent advances in intrusion detection
Performance of FPGA implementation of bit-split architecture for intrusion detection systems

IPDPS'06 Proceedings of the 20th international conference on Parallel and distributed processing
Fast regular expression matching using small TCAMs for network intrusion detection and prevention systems

USENIX Security'10 Proceedings of the 19th USENIX conference on Security
Efficient pattern matching algorithm for memory architecture

IEEE Transactions on Very Large Scale Integration (VLSI) Systems
A computationally efficient engine for flexible intrusion detection

IEEE Transactions on Very Large Scale Integration (VLSI) Systems
MIDeA: a multi-parallel intrusion detection architecture

Proceedings of the 18th ACM conference on Computer and communications security
PeRex: A Power Efficient FPGA-based Architecture for Regular Expression Matching

GREENCOM '11 Proceedings of the 2011 IEEE/ACM International Conference on Green Computing and Communications
A high-throughput system architecture for deep packet filtering in network intrusion prevention

ARCS'06 Proceedings of the 19th international conference on Architecture of Computing Systems
Efficient logic circuit for network intrusion detection

EUC'06 Proceedings of the 2006 international conference on Embedded and Ubiquitous Computing
Pattern-unit based regular expression matching with reconfigurable function unit

ICCSA'10 Proceedings of the 2010 international conference on Computational Science and Its Applications - Volume Part IV
Pattern matching acceleration for network intrusion detection systems

SAMOS'05 Proceedings of the 5th international conference on Embedded Computer Systems: architectures, Modeling, and Simulation
String alignment pre-detection using unique subsequences for FPGA-based network intrusion detection

Computer Communications
Smart architecture for high-speed intrusion detection and prevention systems

CANS'06 Proceedings of the 5th international conference on Cryptology and Network Security
A regular expression matching circuit: Decomposed non-deterministic realization with prefix sharing and multi-character transition

Microprocessors & Microsystems
FPGA-based cuckoo hashing for pattern matching in NIDS/NIPS

APNOMS'07 Proceedings of the 10th Asia-Pacific conference on Network Operations and Management Symposium: managing next generation networks and services
Static patterns matching for high speed networks

ICICA'12 Proceedings of the Third international conference on Information Computing and Applications
An enhanced architecture for pattern matching in FPGA for intrusion detection in wireless sensor networks

International Journal of Mobile Network Design and Innovation
Scalable TCAM-based regular expression matching with compressed finite automata

ANCS '13 Proceedings of the ninth ACM/IEEE symposium on Architectures for networking and communications systems
Fast Regular Expression Matching Using Small TCAM

IEEE/ACM Transactions on Networking (TON)

Quantified Score

Hi-index	0.00

Visualization

Abstract

A module has been implemented in Field Programmable Gate Array (FPGA) hardware that scansthe content of Internet packets at Gigabit/second rates.All of the packet processing operations are performedusing reconfigurable hardware within a single XilinxVirtex XCV2000E FPGA. A set of layered protocolwrappers is used to parse the headers and payloads ofpackets for Internet protocol data. A content matching server automatically generates the Finite State Machines (FSMs) to search for regular expressions. Thecomplete system is operated on the Field-programmablePort Extender (FPX) platform.