The cost effective pre-processing based NFA pattern matching architecture for NIDS

Yeim Kuan Chang, Chen Rong Chang, Cheng Chien Su

Research output: Chapter in Book/Report/Conference proceedingConference contribution

10 Citations (Scopus)

Abstract

Network Intrusion Detection System (NIDS) is a system which can detect network attacks resulted from worms and viruses on the Internet. An efficient pattern matching algorithm plays an important role in NIDS. There have been many proposed methods for pattern matching algorithms. Traditionally, the multi-character NFA that is capable of matching multiple characters per cycle can be built by duplicating entire circuit of 1-character architecture. In this paper, we propose a pre-processing based architecture to improve the original multi-character architecture. The design of the proposed architecture and its implementation in FPGA are described in details. Our simulation results show that the proposed architecture performs better than all the existing Brute-Force based approaches in terms of the throughput and the slice utilization. Specifically, the proposed architectures of 2-character and 4-character designs can achieve the throughputs of 4.68 and 7.27 Gbps and the slice utilization of 2.86 and 2.10 in terms of char/slice, respectively.

Original languageEnglish
Title of host publication24th IEEE International Conference on Advanced Information Networking and Applications, AINA 2010
Pages385-391
Number of pages7
DOIs
Publication statusPublished - 2010
Event24th IEEE International Conference on Advanced Information Networking and Applications, AINA2010 - Perth, WA, Australia
Duration: 2010 Apr 202010 Apr 23

Publication series

NameProceedings - International Conference on Advanced Information Networking and Applications, AINA
ISSN (Print)1550-445X

Other

Other24th IEEE International Conference on Advanced Information Networking and Applications, AINA2010
Country/TerritoryAustralia
CityPerth, WA
Period10-04-2010-04-23

All Science Journal Classification (ASJC) codes

  • General Engineering

Fingerprint

Dive into the research topics of 'The cost effective pre-processing based NFA pattern matching architecture for NIDS'. Together they form a unique fingerprint.

Cite this