TY - GEN
T1 - Design and evaluation of parallel string matching algorithms for network intrusion detection systems
AU - Kwok, Tyrone Tai On
AU - Kwok, Yu Kwong
PY - 2007
Y1 - 2007
N2 - Network security is very important for Internet-connected hosts because of the widespread of worms, viruses, DoS attacks, etc. As a result, a network intrusion detection system (NIDS) is typically needed to detect network attacks by packet inspection. For an NIDS system, string matching is the computation-intensive task and hence the performance bottleneck, since every byte of the payload of packets must be checked against numerous predefined signature strings, which may occur arbitrarily in the payload. In this paper, we present the design and evaluation of parallel string matching algorithms targeting hardware implementation on FPGAs and software implementation on multi-core processors. Experimental results show that, on a multi-processor system, the multi-threaded implementation of the proposed parallel string matching algorithm can reduce string matching time by more than 40%.
AB - Network security is very important for Internet-connected hosts because of the widespread of worms, viruses, DoS attacks, etc. As a result, a network intrusion detection system (NIDS) is typically needed to detect network attacks by packet inspection. For an NIDS system, string matching is the computation-intensive task and hence the performance bottleneck, since every byte of the payload of packets must be checked against numerous predefined signature strings, which may occur arbitrarily in the payload. In this paper, we present the design and evaluation of parallel string matching algorithms targeting hardware implementation on FPGAs and software implementation on multi-core processors. Experimental results show that, on a multi-processor system, the multi-threaded implementation of the proposed parallel string matching algorithm can reduce string matching time by more than 40%.
UR - https://www.scopus.com/pages/publications/38149114079
U2 - 10.1007/978-3-540-74784-0_35
DO - 10.1007/978-3-540-74784-0_35
M3 - Conference contribution
AN - SCOPUS:38149114079
SN - 9783540747833
T3 - Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
SP - 344
EP - 353
BT - Network and Parallel Computing - IFIP International Conference, NPC 2007, Proceedings
A2 - Li, Keqiu
A2 - Li, Keqiu
A2 - Li, Keqiu
A2 - Jesshope, Chris
A2 - Jesshope, Chris
A2 - Jesshope, Chris
A2 - Jin, Hai
A2 - Jin, Hai
A2 - Jin, Hai
A2 - Gaudiot, Jean-Luc
A2 - Gaudiot, Jean-Luc
A2 - Gaudiot, Jean-Luc
T2 - 2007 IFIP International Conference on Network and Parallel Computing, NPC 2007
Y2 - 18 September 2007 through 21 September 2007
ER -