Affiliation:
1. North Carolina State University, Raleigh NC
Abstract
Signature-based Intrusion Detection Systems (IDSs) monitor network traffic for security threats by scanning packet payloads for attack signatures. IDSs have to run at wire speed and need to be configurable to protect against emerging attacks. In this paper we consider the problem of string matching which is the most computationally intensive task in IDS. A configurable string matching accelerator is developed with the focus on increasing throughput while maintaining the configurability provided by the software IDSs. Our preliminary results suggest that the hardware accelerator offers an overall system performance of up to 14Gbps.
Publisher
Association for Computing Machinery (ACM)
Cited by
33 articles.
订阅此论文施引文献
订阅此论文施引文献，注册后可以免费订阅5篇论文的施引文献，订阅后可以查看论文全部施引文献
1. Fidas;Proceedings of the 49th Annual International Symposium on Computer Architecture;2022-06-11
2. RTRBench: A Benchmark Suite for Real-Time Robotics;2022 IEEE International Symposium on Performance Analysis of Systems and Software (ISPASS);2022-05
3. Reconfigurable signature-based information security tools of computer systems;2022
4. Prevalent Exact String-Matching Algorithms in Natural Language Processing: A Review;Journal of Physics: Conference Series;2021-04-01
5. Neuromorphic vision networks for face recognition;Mem-elements for Neuromorphic Circuits with Artificial Intelligence Applications;2021