|
| This Article | ||
| ||
| Share | ||
| Bibliographic References | ||
| Add to: | ||
| | ||
| Search | ||
| ||
2007 International Conference on Parallel Processing (ICPP 2007)
A Fast Multi-pattern Matching Algorithm for Deep Packet Inspection on a Network Processor
Xi'an, China
September 10-September 14
ISBN: 0-7695-2933-X
| ASCII Text | x | ||
| Jia Ni, Chuang Lin, Zhen Chen, Peter Ungsunan, "A Fast Multi-pattern Matching Algorithm for Deep Packet Inspection on a Network Processor," 2012 41st International Conference on Parallel Processing, pp. 16, 2007 International Conference on Parallel Processing (ICPP 2007), 2007. | |||
| BibTex | x | ||
| @article{ 10.1109/ICPP.2007.7, author = {Jia Ni and Chuang Lin and Zhen Chen and Peter Ungsunan}, title = {A Fast Multi-pattern Matching Algorithm for Deep Packet Inspection on a Network Processor}, journal ={2012 41st International Conference on Parallel Processing}, volume = {0}, year = {2007}, issn = {0190-3918}, pages = {16}, doi = {http://doi.ieeecomputersociety.org/10.1109/ICPP.2007.7}, publisher = {IEEE Computer Society}, address = {Los Alamitos, CA, USA}, } | |||
| RefWorks Procite/RefMan/Endnote | x | ||
| TY - CONF JO - 2012 41st International Conference on Parallel Processing TI - A Fast Multi-pattern Matching Algorithm for Deep Packet Inspection on a Network Processor SN - 0190-3918 SP EP A1 - Jia Ni, A1 - Chuang Lin, A1 - Zhen Chen, A1 - Peter Ungsunan, PY - 2007 KW - null VL - 0 JA - 2012 41st International Conference on Parallel Processing ER - | |||
DOI Bookmark: http://doi.ieeecomputersociety.org/10.1109/ICPP.2007.7
Deep Packet Inspection (DPI) is a critical function in network security applications such as Firewalls and Intrusion Detection Systems (IDS). Signature based scanners used in DPI apply multi-pattern matching algorithms to check whether the packet payload or flow content contains a specified signature in a signature set. Existing multi-pattern matching algorithms sacrifice memory space to achieve better performance. In this paper a novel fast multi-pattern matching algorithm, the Hash Boyer-Moore (HBM) Algorithm, is presented, which reduces the memory footprint of the heuristic table using a hash function and adds another heuristic table to reduce the false-positive ratio. Analyses and simulations show HBM offers higher speed and lower memory cost than some existing algorithms. The HBM algorithm was implemented on the Intel IXP 2400 Network Processor (NP) platform and experiments show suitable performance results in a Gigabit Ethernet LAN environment.
Citation:
Jia Ni, Chuang Lin, Zhen Chen, Peter Ungsunan, "A Fast Multi-pattern Matching Algorithm for Deep Packet Inspection on a Network Processor," icpp, pp.16, 2007 International Conference on Parallel Processing (ICPP 2007), 2007
Usage of this product signifies your acceptance of the Terms of Use.
