A Parallel NIDS Pattern Matching Engine and Its Implementation on Network Processor

@inproceedings{Yu2005APN,
  title={A Parallel NIDS Pattern Matching Engine and Its Implementation on Network Processor},
  author={Jianming Yu and Jun Li},
  booktitle={Security and Management},
  year={2005}
}
At the heart of almost every modern Network Intrusion Detection System (NIDS), there is a pattern matching engine (PME). As pattern matching is the most time consuming operation in NIDS, it is highly desired to reduce the pattern matching time of each packet or flow. This paper proposed a parallel pattern matching algorithm based on Aho-Corasick (AC) algorithm and an efficient load balance policy for it. The method is implemented on Intel’s IXP2850 Network Processor (NP). Experimental results… CONTINUE READING
7 Citations
8 References
Similar Papers

References

Publications referenced by this paper.
Showing 1-8 of 8 references

A domain-specific string matching algorithm for intrusion detection.

  • K. G. Anagnostakis, E. P. Markatos, S. Antonatos, M. Polychronakis
  • Proc. 18 xB E 2 th IFIP International…
  • 2003
Highly Influential
3 Excerpts

A fast algorithm for multi-pattern searching.

  • S. Wu, U. Manber
  • Technical Report TR94-17,
  • 1994
Highly Influential
3 Excerpts

Similar Papers

Loading similar papers…