Affiliation:
1. School of Electrical and Computer Engineering, National Technical University of Athens, 15773 Athens, Greece
2. Optagon Photonics, Eleftheriou Venizelou 47, 15351 Pallini, Greece
Abstract
Bit-pattern matching is an important technological capability, used in many fields such as network intrusion detection (NID) and packet classification systems. Essentially, it involves the matching of an input bit pattern to a bit-pattern entry of a memory structure inside the system. Contemporary methods focus on the decomposition of the input bit pattern into smaller and more manageable parts, with the subsequent parallel processing of these elements. This fragmentation promotes the use of advanced pipeline techniques and hardware optimizations, enabling these methods to achieve very high throughputs and reasonable efficiency. However, the functionality of their respective circuits is limited to only performing pattern matching when there is no interference. In this article, we intend to present a circuit that performs pattern matching under heavy interference; instead of fragmentation, a more holistic approach will be adopted. To improve the throughput of the circuit, long bit sequences will be directly compared to many memory entries simultaneously. The minimization of hardware consumption and maximization of efficiency in these comparisons will be achieved with the use of novel hardware architecture that is based on pipelined adder trees and comparators. The platform of implementation is an FPGA (Field-Programmable Gate Array).
Subject
Electrical and Electronic Engineering,Computer Networks and Communications,Hardware and Architecture,Signal Processing,Control and Systems Engineering
Reference12 articles.
1. HaRP: Rapid Packet Classification via Hashing Round-Down Prefixes;Pong;IEEE Trans. Parallel Distrib. Syst.,2011
2. Deep network packet filter design for reconfigurable devices;Cho;ACM Trans. Embed. Comput. Syst.,2008
3. Thinh, T.N., Hieu, T.T., and Kittitornkun, S. (2012, January 16–18). A FPGA-based deep packet inspection engine for Network Intrusion Detection System. Proceedings of the 2012 9th International Conference on Electrical Engineering/Electronics, Computer, Telecommunications and Information Technology, Phetchaburi, Thailand.
4. A Memory-Efficient and Modular Approach for Large-Scale String Pattern Matching;Le;IEEE Trans. Comput.,2013
5. An Efficient and Scalable Semiconductor Architecture for Parallel Automata Processing;Dlugosch;IEEE Trans. Parallel Distrib. Syst.,2014
Cited by
1 articles.
订阅此论文施引文献
订阅此论文施引文献,注册后可以免费订阅5篇论文的施引文献,订阅后可以查看论文全部施引文献
1. A Scalable Pattern Matching Implementation on Hardware using Data Level Parallelism;2023 IEEE 22nd International Conference on Trust, Security and Privacy in Computing and Communications (TrustCom);2023-11-01