LIÊN KẾT WEBSITE
Optimization of regular expression processing circuits for NIDS on FPGA
Proceedings - 2011 2nd International Conference on Networking and Computing, ICNC 2011 Số , năm 2011 (Tập , trang 105-112)
DOI: 10.1109/ICNC.2011.23
Tài liệu thuộc danh mục: Scopus
Conference Paper
English
Từ khóa: dfa; nfa; nids; pcre; Regular expressions; Memory architecture; Networks (circuits); Optimization
Tóm tắt tiếng anh
Recent Network Intrusion Detection System (NIDS) utilizes more and more Regular Expression to describe malicious patterns existing in the content payload of packets. Many researches are investigated and several techniques are introduced to optimize performance and support all functions of regular expression on hardware platform. However there is very few researches in the minimization of multiple regular expressions. This paper takes in account of compiling multiple regular expressions with respect to optimize hardware resources. We take advantage of block memory to implement character matching and present a novel sharing architecture which completely supports sharing common parts among given set of regular expressions. Experimental results show that our optimization can reduce 46% area circuits compared with previous approaches and achieve throughput of 1.5-2.1 Gbps on Snort malicious database. 2011 IEEE.