NDLI: Gigabit rate packet pattern-matching using TCAM

Content Provider	IEEE Xplore Digital Library
Author	Fang Yu Katz, R.H. Lakshman, T.V.
Copyright Year	2004
Description	Author affiliation: Dept. of Electr. Eng. & Comput. Sci., California Univ., Berkeley, CA, USA (Fang Yu; Katz, R.H.)
Abstract	In today's Internet, worms and viruses cause service disruptions with enormous economic impact. Current attack prevention mechanisms rely on end-user cooperation to install new system patches or upgrade security software, yielding slow reaction time. However, malicious attacks spread much faster than users can respond, making effective attack prevention difficult network-based mechanisms, by avoiding end-user coordination, can respond rapidly to new attacks. Such mechanisms require the network to inspect the packet payload at line rates to detect and filter those packets containing worm signatures. These signature sets are large (e.g., thousands) and complex. Software-only implementations are unlikely to meet the performance goals. Therefore, making a network-based scheme practical requires efficient algorithms suitable for hardware implementations. This work develops a ternary content addressable memory (TCAM) based multiple-pattern matching scheme. The scheme can handle complex patterns; such as arbitrarily long patterns, correlated patterns, and patterns with negation. For the ClamAv virus database with 1768 patterns whose sizes vary from 6 bytes to 2189 bytes, the proposed scheme can operate at a 2 Gbps rate with a 240 KB TCAM.
Sponsorship	IEEE Comput. Soc. German Soc. of Informatics
Starting Page	174
Ending Page	183
File Size	377083
Page Count	10
File Format	PDF
ISBN	0769521614
ISSN	10921648
DOI	10.1109/ICNP.2004.1348108
Language	English
Publisher	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Publisher Date	2004-10-08
Publisher Place	Germany
Access Restriction	Subscribed
Rights Holder	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Subject Keyword	Intrusion detection Pattern matching Payloads Filtering Hardware Associative memory Databases Data security Monitoring Web and internet services
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

An independently partial pattern matching for content inspection at multi gigabit networks

A multi-gigabit rate deep packet inspection algorithm using TCAM

CAM01-1: A Customized TCAM Architecture for Multi-Match Packet Classification

In-Depth Packet Inspection Using a Hierarchical Pattern Matching Algorithm

Data Security Implementation for Real Time Internet Packet Traces

Packet pre-filtering for network intrusion detection

Space and Speed Tradeoffs in TCAM Hierarchical Packet Classification

High Speed Pattern Matching for Network IDS/IPS

Memory-efficient content filtering hardware for high-speed intrusion detection systems

Gigabit rate packet pattern-matching using TCAM

Similar Documents

An independently partial pattern matching for content inspection at multi gigabit networks

A multi-gigabit rate deep packet inspection algorithm using TCAM

CAM01-1: A Customized TCAM Architecture for Multi-Match Packet Classification

In-Depth Packet Inspection Using a Hierarchical Pattern Matching Algorithm

Data Security Implementation for Real Time Internet Packet Traces

Packet pre-filtering for network intrusion detection

Space and Speed Tradeoffs in TCAM Hierarchical Packet Classification

High Speed Pattern Matching for Network IDS/IPS

Memory-efficient content filtering hardware for high-speed intrusion detection systems

Gigabit rate packet pattern-matching using TCAM