Tree-based string pattern matching on FPGAs

dc.authorwosiderdem, oğuzhan/AAG-6229-2019
dc.contributor.authorErdem, Oguzhan
dc.date.accessioned2024-06-12T11:15:41Z
dc.date.available2024-06-12T11:15:41Z
dc.date.issued2016
dc.departmentTrakya Üniversitesien_US
dc.description.abstractNetwork intrusion detection systems (NIDSs) monitor Internet Protocol (IP) traffic to detect anomalous and malicious activities on a network. Despite the plethora of studies in this field, hardware-based string matching engines that can accommodate the advancements in optical networking technology are still in high demand. Furthermore, memory efficient data structures to store intrusion patterns have recently received a great deal of research attention. In this paper, we introduce a tree-based pattern matching (TPM) scheme that comprises a forest of Binary Search Tree (BST) data structures and an accommodating high-throughput multi-pipelined architecture for scalable string matching on hardware. To improve the resource efficiency in hardware implementations, we enhanced TPM scheme (extended-TPM) with two novel tree structures, namely BST-epsilon (BST epsilon) and hierarchical BST (H-BST). Our entire design accomplishes a memory efficiency of 1.07 bytes/char for the latest Snort dictionary. Utilizing a state-of-the-art Field Programmable Gate Arrays (FPGAs), TPM architecture can sustain a throughput of 2.7 Gbps. (C) 2015 Elsevier Ltd. All rights reserved.en_US
dc.identifier.doi10.1016/j.compeleceng.2015.11.025
dc.identifier.endpage133en_US
dc.identifier.issn0045-7906
dc.identifier.issn1879-0755
dc.identifier.scopus2-s2.0-84949657737en_US
dc.identifier.scopusqualityQ1en_US
dc.identifier.startpage117en_US
dc.identifier.urihttps://doi.org/10.1016/j.compeleceng.2015.11.025
dc.identifier.urihttps://hdl.handle.net/20.500.14551/24032
dc.identifier.volume49en_US
dc.identifier.wosWOS:000368208100011en_US
dc.identifier.wosqualityQ3en_US
dc.indekslendigikaynakWeb of Scienceen_US
dc.indekslendigikaynakScopusen_US
dc.language.isoenen_US
dc.publisherPergamon-Elsevier Science Ltden_US
dc.relation.ispartofComputers & Electrical Engineeringen_US
dc.relation.publicationcategoryMakale - Uluslararası Hakemli Dergi - Kurum Öğretim Elemanıen_US
dc.rightsinfo:eu-repo/semantics/closedAccessen_US
dc.subjectString Matchingen_US
dc.subjectIntrusion Detectionen_US
dc.subjectFPGAen_US
dc.subjectBinary Treeen_US
dc.subjectNIDSen_US
dc.titleTree-based string pattern matching on FPGAsen_US
dc.typeArticleen_US

Dosyalar