NDLI: Efficient Multimatch Packet Classification for Network Security Applications

Content Provider	IEEE Xplore Digital Library
Author	Fang Yu Lakshman, T.V. Motoyama, M.A. Katz, R.H.
Copyright Year	1983
Abstract	New network applications like intrusion detection systems and packet-level accounting require multimatch packet classification, where all matching filters need to be reported. Ternary content addressable memories (TCAMs) have been adopted to solve the multimatch classification problem due to their ability to perform fast parallel matching. However, TCAMs are expensive and consume large amounts of power. None of the previously published multimatch classification schemes are both memory and power efficient. In this paper, we develop a novel scheme that meets both requirements by using a new set splitting algorithm (SSA). The main idea behind SSA is that it splits filters into multiple groups and performs separate TCAM lookups into these groups. It guarantees the removal of at least 1/2 the intersections when a filter set is split into two sets, thus resulting in low TCAM memory usage. SSA also accesses filters in the TCAM only once per packet, leading to low-power consumption. We compare SSA with two best known schemes: multimatch using discriminators (MUD) (Lakshminarayanan and Rangarajan, 2005) and geometric intersection-based solutions (Yu and Katz, 2004). Simulation results based on the SNORT filter sets show that SSA uses approximately the same amount of TCAM memory as MUD, but yields a 75%-95% reduction in power consumption. Compared with geometric intersection-based solutions, SSA uses 90% less TCAM memory and power at the cost of one additional TCAM lookup per packet. We also show that SSA can be combined with SRAM/TCAM hybrid approaches to further reduce energy consumption
Starting Page	1805
Ending Page	1816
Page Count	12
File Size	1008823
File Format	PDF
ISSN	07338716
Volume Number	24
Issue Number	10
Language	English
Publisher	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Publisher Date	2006-10-01
Publisher Place	U.S.A.
Access Restriction	One Nation One Subscription (ONOS)
Rights Holder	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Subject Keyword	Intrusion detection Matched filters Associative memory Multiuser detection Energy consumption Counting circuits Payloads Costs Random access memory US Department of Commerce ternary content addressable memory (TCAM) Energy-efficient design multiple-match packet classification
Content Type	Text
Resource Type	Article
Subject	Computer Networks and Communications Electrical and Electronic Engineering

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

A High-Speed Range-Matching TCAM for Storage-Efficient Packet Classification

Efficient compression algorithm for ternary content addressable memory-based regular expression matching

A space- and power-efficient multi-match packet classification technique combining TCAMs and SRAMs

Complete Redundancy Removal for Packet Classifiers in TCAMs

TCAM Razor: A Systematic Approach Towards Minimizing Packet Classifiers in TCAMs

Low-Capacitance and Charge-Shared Match Lines for Low-Energy High-Performance TCAMs

Topological Transformation Approaches to TCAM-Based Packet Classification

High-Throughput and Memory-Efficient Multimatch Packet Classification Based on Distributed and Pipelined Hash Tables

A High-Performance and Energy-Efficient TCAM Design for IP-Address Lookup

Efficient Multimatch Packet Classification for Network Security Applications

Similar Documents

A High-Speed Range-Matching TCAM for Storage-Efficient Packet Classification

Efficient compression algorithm for ternary content addressable memory-based regular expression matching

A space- and power-efficient multi-match packet classification technique combining TCAMs and SRAMs

Complete Redundancy Removal for Packet Classifiers in TCAMs

TCAM Razor: A Systematic Approach Towards Minimizing Packet Classifiers in TCAMs

Low-Capacitance and Charge-Shared Match Lines for Low-Energy High-Performance TCAMs

Topological Transformation Approaches to TCAM-Based Packet Classification

High-Throughput and Memory-Efficient Multimatch Packet Classification Based on Distributed and Pipelined Hash Tables

A High-Performance and Energy-Efficient TCAM Design for IP-Address Lookup

Efficient Multimatch Packet Classification for Network Security Applications