Sciweavers

Share
DATE
2010
IEEE

Ultra-high throughput string matching for Deep Packet Inspection

11 years 5 months ago
Ultra-high throughput string matching for Deep Packet Inspection
Deep Packet Inspection (DPI) involves searching a packet's header and payload against thousands of rules to detect possible attacks. The increase in Internet usage and growing number of attacks which must be searched for has meant hardware acceleration has become essential in the prevention of DPI becoming a bottleneck to a network if used on an edge or core router. In this paper we present a new multi-pattern matching algorithm which can search for the fixed strings contained within these rules at a guaranteed rate of one character per cycle independent of the number of strings or their length. Our algorithm is based on the Aho-Corasick string matching algorithm with our modifications resulting in a memory reduction of over 98% on the strings tested from the Snort ruleset. This allows the search structures needed for matching thousands of strings to be small enough to fit in the on-chip memory of an FPGA. Combined with a simple architecture for hardware, this leads to high throug...
Alan Kennedy, Xiaojun Wang, Zhen Liu, Bin Liu
Added 02 Aug 2010
Updated 02 Aug 2010
Type Conference
Year 2010
Where DATE
Authors Alan Kennedy, Xiaojun Wang, Zhen Liu, Bin Liu
Comments (0)
books