loading...
 This Article 
   
 Share 
   
 Bibliographic References 
   
 Add to: 
 
Digg
Furl
Spurl
Blink
Simpy
Google
Del.icio.us
Y!MyWeb
 
 Search 
   
13th Annual IEEE Symposium on Field-Programmable Custom Computing Machines (FCCM'05)
A Signature Match Processor Architecture for Network Intrusion Detection
Los Alamitos
April 18-April 20
ISBN: 0-7695-2445-1
Janardhan Singaraju, University of Connecticut
Long Bu, University of Connecticut
John A. Chandy, University of Connecticut
In this paper, we introduce a novel architecture for a hardware based network intrusion detection system (NIDS). NIDSs are becoming critical components of the network infrastructure as they serve as a key line of defense in network protection. However, current methods are much too compute intensive and can not begin to meet the bandwidth requirements of a moderate sized corporate network. Thus, hardware techniques are desired to speed up network processing. This paper introduces a FPGA based signature match processor that can serve as the core of a hardware based NIDS. The signature match processor?s key feature is a CAM-based cellular processor architecture that can match strings in an area efficient manner. Using a unique binary tree structure, we are also able to generate priority encoded addresses corresponding to multiple signature matches.
Citation:
Janardhan Singaraju, Long Bu, John A. Chandy, "A Signature Match Processor Architecture for Network Intrusion Detection," fccm, pp.235-242, 13th Annual IEEE Symposium on Field-Programmable Custom Computing Machines (FCCM'05), 2005
Usage of this product signifies your acceptance of the Terms of Use.