A fast pattern-match engine for network processor-based network intrusion detection system

  title={A fast pattern-match engine for network processor-based network intrusion detection system},
  author={Rong-Tai Liu and Nen-Fu Huang and Chia-Nan Kao and Chih-Hao Chen and Chi-Chieh Chou},
  journal={International Conference on Information Technology: Coding and Computing, 2004. Proceedings. ITCC 2004.},
  pages={97-101 Vol.1}
Network intrusion detection systems (NIDS) are one of the latest developments in security. The matching of packet strings against collected signatures dominates signature-based NIDS performance. This work presents FNP/sup 2/, an efficient pattern-matching engine designed for Network Processor platform which conducts matching sets of patterns in parallel. This work shows that combining our string matching methodology, hashing engine supported by most network processors, and characteristics of… CONTINUE READING
Highly Cited
This paper has 32 citations. REVIEW CITATIONS
19 Citations
10 References
Similar Papers


Publications citing this paper.
Showing 1-10 of 19 extracted citations


Publications referenced by this paper.
Showing 1-10 of 10 references

An analysis of fast string matching applied to content-based forwarding and intrusion detection

  • M. Fisk, G. Varghese
  • Technical Report CS2001-0670 (updated version…
  • 2001
Highly Influential
5 Excerpts

A fast algorithm for multi-pattern searching

  • Sun Wu, Udi Manber
  • Tech. Rep. TR94-17, Department of Computer…
  • 1994
Highly Influential
3 Excerpts

Towards faster patern matching for intrusion detection or exceeding the speed of snort

  • C. Jason Coit, Stuart Staniford, Joseph McAlerney
  • Proceedings of the 2nd DARPA Information…
  • 2001
1 Excerpt

The Network Processor Enabling Technology for High-Performance Networking

  • IBM
  • Available from http://www.npforum.org/pressroom…
1 Excerpt

Similar Papers

Loading similar papers…