TAILIEUCHUNG - Efficient Pattern Matching Algorithm for Memory Architecture

Network intrusion detection system is used to inspect packet contents against thousands of predefined malicious or suspicious patterns. Because traditional software alone pattern matching approaches can no longer meet the high throughput of today’s networking, many hardware approaches are proposed to accelerate pattern matching. | This article has been accepted for inclusion in a future issue of this journal. Content is final as presented with the exception of pagination. 1 IEEE TRANSACTIONS ON VERY LARGE SCALE INTEGRATION VLSI SYSTEMS Efficient Pattern Matching Algorithm for Memory Architecture Cheng-Hung Lin Member IEEE and Shih-Chieh Chang Member IEEE Abstract Network intrusion detection system is used to inspect packet contents against thousands of predefined malicious or suspicious patterns. Because traditional software alone pattern matching approaches can no longer meet the high throughput of today s networking many hardware approaches are proposed to accelerate pattern matching. Among hardware approaches memory-based architecture has attracted a lot of attention because of its easy reconfigurability and scalability. In order to accommodate the increasing number of attack patterns and meet the throughput requirement of networks a successful network intrusion detection system must have a memory-efficient pattern-matching algorithm and hardware design. In this paper we propose a memory-efficient pattern-matching algorithm which can significantly reduce the memory requirement. For Snort rule sets the new algorithm achieves 21 of memory reduction compared with the traditional Aho-Corasick algorithm. In addition we can gain 24 of memory reduction by integrating our approach to the bit-split algorithm which is the state-of-the-art memory-based approach. Index Terms Aho-Corasick AC algorithm finite automata pattern matching. I. Introduction The main purpose of a signature-based network intrusion detection system is to prevent malicious network attacks by identifying known attack patterns. Due to the increasing complexity of network traffic and the growing number of attacks an intrusion detection system must be efficient flexible and scalable. The primary function of an intrusion detection system is to perform matching of attack string patterns. Because string matching is the most computative

• An ninh - Bảo mật
• The Memory Architecture
• Efficient Pattern Matching Algorithm
• Review of AC algorithm
• The Hardware architecture
• The Related researches
• The Experimental results
• Lecture Advanced Computer Architecture
• Advanced Computer Architecture
• Bài giảng Kiến trúc máy tính nâng cao
• Memory hierarchy design
• Main memory performance
• Virtual memory performance
• Virtual memory system
• Virtual memory address translation
• Lecture Computer Architecture
• Computer Architecture
• Bài giảng Kiến trúc máy tính
• Memory hierarchy
• Cache organization
• Virtual memory (self learning)
• CPU to memory interface
• Memory subsystems
• High capacity memory
• Memory module
• Storage technologies trends
• Memory hierarchy pyramid
• Bài giảng Computer Organization and Architecture
• Computer Organization and Architecture
• Bộ nhớ Cache
• Tính chất vật lý Cache Memory
• Đặc điểm Cache Memory
• Vị trí Cache Memory
• Bài giảng Computer architecture
• Kiến trúc máy tính
• Memory System Design
• Bộ nhớ hệ thống
• Main memory concepts
• Cache memory organization
• Bộ nhớ trong
• Bộ nhớ bán dẫn
• Semiconductor Memory Types
• Memory Cell Operation
• Lecture Computer Architecture and Assembly Language Programming
• Assembly language programming
• Display memory
• Character mode
• Number printing algorithm
• Average memory access time
• Memory system
• Direct mapped cache
• Principle of locality
• Cache addressing techniques
• Cache design techniques
• Cache performance metrics
• Cache write strategy
• Cache performance enhancement
• Reducing miss penalty
• CPU execution time equation
• Reducing miss rate
• Instruction level parallelism
• Symmetric shared memory
• Distributed shared memory
• Synchronization mechanisms
• Foundations of computer architecture
• Arithmetic logic shift unit
• Computer Evolution
• Cache Memory
• External Memory
• Internal Memory Technology
• Computer Arithmetic
• A PARSING ARCHITECTURE
• DISTRIBUTED MEMORY MACHINES
• Jon M
• Slack
• scientific reports
• model language
• process natural language
• Summarizing Performance
• Integrated Circuits
• Concluding Remarks
• Memory Technology
• Memory Hierarchies
• Computer system
• Multiprocessor architecture