NDLI: A Multi-dimension Rule Update in a TCAM-based High-Performance Network Security System

Content Provider	IEEE Xplore Digital Library
Author	Hae-Jin Jeong Il-Seop Song Yoo-Kyoung Lee Taeck-Geun Kwon
Copyright Year	2006
Description	Author affiliation: Dept. of Comput. Sci. & Eng., Chungnam Nat. Univ., Daejon (Hae-Jin Jeong; Il-Seop Song)
Abstract	Network security systems such as firewall and intrusion prevention system (IPS) have packet classification rule to allow or protect the network traffic. In addition, they are forced to provide multi-gigabit speed in order to deploy the current Internet backbone which requires gigabit Ethernet (GbE), 10 GbE, OC-192, etc. In order to support high-performance packet classification in the network security system, a ternary content addressable memory, i.e., TCAM accelerates flow identification with classification rules. The TCAM, however, matches the first rule among multiple matched rules, so the ordering of TCAM entries is strictly kept while rules are added or deleted. To keep the ordering in a TCAM, some existing TCAM entries should move to other empty space which impacts the data path processing in the network security system. In this paper, we have proposed a rule update algorithm which reduces the number of TCAM entry movement by the partial ordering of TCAM entry groups instead of the sequential ordering. Our simulation results justify the significant decrement of movement operations where we have applied both generated random rules and real IPS rules, i.e., Snort rules
Starting Page	62
Ending Page	66
File Size	534219
Page Count	5
File Format	PDF
ISBN	0769524664
ISSN	1550445X
DOI	10.1109/AINA.2006.37
Language	English
Publisher	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Publisher Date	2006-04-18
Publisher Place	Austria
Access Restriction	Subscribed
Rights Holder	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Subject Keyword	Intelligent networks National security Telecommunication traffic Internet Filtering Routing Spine Ethernet networks Associative memory IP networks
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

A multi-dimension rule update in a tcam-based high-performance network security system (2006).

Measuring resilience in multi-carrier emergency and critical telecommunications systems

High-performance TCAM-based IP lookup engines

Generation of high bandwidth network traffic traces

Design of an Internet core router using the SoCBUS network on chip

TCAM Razor: A Systematic Approach Towards Minimizing Packet Classifiers in TCAMs

An encoding scheme for TCAM-based packet classification

Channel Reservation Scheme Based on AODV Routing Protocol for Common Traffic in Wireless Mesh Network

Traffic variations caused by inter-domain re-routing

A Multi-dimension Rule Update in a TCAM-based High-Performance Network Security System

Similar Documents

A multi-dimension rule update in a tcam-based high-performance network security system (2006).

Measuring resilience in multi-carrier emergency and critical telecommunications systems

High-performance TCAM-based IP lookup engines

Generation of high bandwidth network traffic traces

Design of an Internet core router using the SoCBUS network on chip

TCAM Razor: A Systematic Approach Towards Minimizing Packet Classifiers in TCAMs

An encoding scheme for TCAM-based packet classification

Channel Reservation Scheme Based on AODV Routing Protocol for Common Traffic in Wireless Mesh Network

Traffic variations caused by inter-domain re-routing

A Multi-dimension Rule Update in a TCAM-based High-Performance Network Security System