NDLI: Fast submatch extraction using OBDDs

Please wait, while we are loading the content...

Softly defined networking

On the feasibility of completely wireless datacenters

NetSlices: scalable multi-core packet processing in user-space

xOMB: extensible open middleboxes with commodity servers

Fast longest prefix name lookup for content-centric network forwarding

Host-based multi-tenant technology for scalable data center networks

Efficient buffering and scheduling for a single-chip crosspoint-queued switch

Software is the future of networking

Attendre: mitigating ill effects of race conditions in openflow via queueing mechanism

A hardware spinal decoder

Floating ground architecture: overcoming the one-hop boundary of current mobile internet

On pending interest table in named data networking

$MCA^{2}:$ multi-core architecture for mitigating complexity attacks

Popularity-driven coordinated caching in named data networking

Cache-aware affinitization on commodity multicores for high-speed network flows

NetBump: user-extensible active queue management with bumps on the wire

Hardware support for dynamic protocol stacks

Distributed adaptive routing for big-data applications running on data center networks

Efficient traffic aware power management in multicore communications processors

Dynamic frequency scaling architecture for energy efficient router

Fast submatch extraction using OBDDs

ECOS: leveraging software-defined networks to support mobile application offloading

Coexist: integrating content oriented publish/subscribe systems with ip

Malacoda: towards high-level compilation of network security applications on reconfigurable hardware

Low-latency modular packet header parser for FPGA

Extensible hierarchical simulation of network systems

LEAP: latency- energy- and area-optimized lookup pipeline

M-DFA (multithreaded DFA): an algorithm for reduction of state transitions and acceleration of REGEXP matching

FlowOS: a pure flow-based vision of network traffic

A new embedded platform for rapid development of network applications

Modular design of data vortex switch network

Structural compression of packet classification trees

PVNs: making virtualized network infrastructure usable

Toward fast NDN software forwarding lookup engine based on hash tables

Securing multi-core multi-threaded packet processors

Fast submatch extraction using OBDDs

Content Provider	ACM Digital Library
Author	Manadhata, Pratyusa Horne, William Ganapathy, Vinod Yang, Liu Rao, Prasad
Abstract	Network-based intrusion detection systems (NIDS) commonly use pattern languages to identify packets of interest. Similarly, security information and event management (SIEM) systems rely on pattern languages for real-time analysis of security alerts and event logs. Both NIDS and SIEM systems use pattern languages extended from regular expressions. One such extension, the submatch construct, allows the extraction of substrings from a string matching a pattern. Existing solutions for submatch extraction are based on non-deterministic finite automata (NFAs) or recursive backtracking. NFA-based algorithms are time-inefficient. Recursive backtracking algorithms perform poorly on pathological inputs generated by algorithmic complexity attacks. We propose a new approach for submatch extraction that uses ordered binary decision diagrams (OBDDs) to represent and operate pattern matching. Our evaluation using patterns from the Snort HTTP rule set and a commercial SIEM system shows that our approach achieves its ideal performance when patterns are combined. In the best case, our approach is faster than RE2 and PCRE by one to two orders of magnitude.
Starting Page	163
Ending Page	174
Page Count	12
File Format	PDF
ISBN	9781450316859
DOI	10.1145/2396556.2396594
Language	English
Publisher	Association for Computing Machinery (ACM)
Publisher Date	2012-10-29
Publisher Place	New York
Access Restriction	Subscribed
Subject Keyword	Regular expression Submatch Tagged-nfa Ordered binary decision diagram (obdd) Pattern matching
Content Type	Text
Resource Type	Article

Central Library (ISO-9001:2015 Certified)
Indian Institute of Technology Kharagpur
Kharagpur, West Bengal, India | PIN - 721302

See location in the Map
03222 282435
Mail: support@ndl.gov.in

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in