LIÊN KẾT WEBSITE
Memory-based multi-pattern signature scanning for ClamAV antivirus
Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics) Số , năm 2014 (Tập 8860, trang 58-70)
ISSN: 3029743
ISSN: 3029743
DOI: 10.1007/978-3-319-12778-1_5
Tài liệu thuộc danh mục: Scopus
Article
English
Từ khóa: Computer system firewalls; Computer viruses; Data structures; Field programmable gate arrays (FPGA); Intrusion detection; Pattern matching; Reconfigurable architectures; Scanning; Anti virus; Bloom filters; Efficient architecture; Intrusion detection/prevention systems; Reconfigurable plat-forms; Regular expressions; Security application; Signature scanning; Network security
Tóm tắt tiếng anh
Signature scanning plays an important role on modern security application such as virus scanners, intrusion detection/prevention systems, and firewalls. High demand of scanning throughput gives rise to recent efforts on hardware-based matching engine. In this paper, we proposed an efficient architecture for matching Clam Antivirus (ClamAV) signatures on reconfigurable platform (FPGA). We utilize Bloom filter technique for filtering input data and Bloomier filter technique for one round check suspect data. Our proposed approach supports up to 256 byte length signatures and can handle both basic and regular expression signatures. Our prototype on NetFPGA platform could handle up to 16K regular expression signatures and 64K basic signatures. � Springer International Publishing Switzerland 2014.
