LIÊN KẾT WEBSITE
Enhanced FPGA-based architecture for regular expression matching in NIDS
ECTI-CON 2010 - The 2010 ECTI International Conference on Electrical Engineering/Electronics, Computer, Telecommunications and Information Technology Số , năm 2010 (Tập , trang 666-670)
DOI:
Tài liệu thuộc danh mục: Scopus
Conference Paper
English
Từ khóa: Altera cyclones; Auto-generating; FPGA-based architectures; Hardware platform; Hardware resources; In-network; Regular expressions; Regular-expression matching; Computer crime; Computer hardware; Information technology; Intrusion detection
Tóm tắt tiếng anh
Perl Compatible Regular Expression (PCRE) is increasingly used in Network Intrusion Detection System due to its efficiency. However, there are many issues that have not been completely solved for PCRE matching on hardware platform. In this paper, we propose an FPGA-based PCRE matching architecture that effectively improves the constraint repetition, an importance feature of PCRE. We enhance our architecture to handle m flag which is a powerful PCRE modifier. Besides, a toolchain for auto-generating PCRE matching engine is also implemented. Our experimental results on low-cost Altera Cyclone II chip shows that our architecture can achieve throughput up to 1Gbps and save up to 92.74% hardware resource as compared with the conventional architecture.
