Fast and memory-efficient regular expression matching for deep packet inspection

F Yu, Z Chen, Y Diao, TV Lakshman… - Proceedings of the 2006 …, 2006 - dl.acm.org
Packet content scanning at high speed has become extremely important due to its
applications in network security, network monitoring, HTTP load balancing, etc. In content …

Kargus: a highly-scalable software-based intrusion detection system

MA Jamshed, J Lee, S Moon, I Yun, D Kim… - Proceedings of the …, 2012 - dl.acm.org
As high-speed networks are becoming commonplace, it is increasingly challenging to
prevent the attack attempts at the edge of the Internet. While many high-performance …

Compiling pcre to fpga for accelerating snort ids

A Mitra, W Najjar, L Bhuyan - Proceedings of the 3rd ACM/IEEE …, 2007 - dl.acm.org
Deep Payload Inspection systems like SNORT and BRO utilize regular expression for their
rules due to their high expressibility and compactness. The SNORT IDS system uses the …

Accelerating pattern matching using a novel parallel algorithm on GPUs

CH Lin, CH Liu, LS Chien… - IEEE Transactions on …, 2012 - ieeexplore.ieee.org
Graphics processing units (GPUs) have attracted a lot of attention due to their cost-effective
and enormous power for massive data parallel computing. In this paper, we propose a novel …

[PDF][PDF] High speed deep packet inspection with hardware support

F Yu - 2006 - Citeseer
Fang Yu Doctor of Philosophy in Computer Science University of California, Berkeley
Professor Randy H. Katz, Chair In this dissertation, we developed high speed packet …

Accelerating string matching using multi-threaded algorithm on GPU

CH Lin, SY Tsai, CH Liu, SC Chang… - 2010 IEEE Global …, 2010 - ieeexplore.ieee.org
Network Intrusion Detection System has been widely used to protect computer systems from
network attacks. Due to the ever-increasing number of attacks and network complexity …

High-performance context-free parser for polymorphic malware detection

YH Cho, WH Mangione-Smith - US Patent App. 11/918,592, 2009 - Google Patents
The invention provides a method and apparatus for advanced network intrusion detection.
The system uses deep packet inspection that can recognize languages described by context …

Packet routing with payload analysis, encapsulation and service module vectoring

JD Bennett - US Patent 7,948,977, 2011 - Google Patents
6.393. 568 Bi 5, 2002 Ranger orts packet content analysis, encapsulation and vectoring on---
9. ports pyp 9. 6,466,591 B1 10/2002 See et al.................... 37Of 535 arriving packet …

A memory efficient multiple pattern matching architecture for network security

T Song, W Zhang, D Wang… - IEEE INFOCOM 2008-The …, 2008 - ieeexplore.ieee.org
Pattern matching is one of the most important components for the content inspection based
applications of network security, and it requires well designed algorithms and architectures …

A memory-efficient pipelined implementation of the aho-corasick string-matching algorithm

D Pao, W Lin, B Liu - ACM Transactions on Architecture and Code …, 2010 - dl.acm.org
With rapid advancement in Internet technology and usages, some emerging applications in
data communications and network security require matching of huge volume of data against …