Massively Parallel Cuckoo Pattern Matching Applied for NIDS/NIPS

Author

Thinh, Tran Ngoc ; Kittitornkun, Surin

Author_Institution

Fac. of Comput. Sci. & Eng., Ho Chi Minh City Univ. of Technol., Ho Chi Minh City, Vietnam

fYear

2010

fDate

13-15 Jan. 2010

Firstpage

217

Lastpage

221

Abstract

This paper describes a Cuckoo-based Pattern Matching (CPM) engine based on a recently developed hashing algorithm called Cuckoo Hashing. We implement the improved parallel Cuckoo Hashing suitable for hardware-based multi-pattern matching with arbitrary length. CPM can rapidly update the static pattern set without reconfiguration while consuming the lowest amount of hardware. With the power of massively parallel processing, the speedup of CPM is up to 128X as compared with serial Cuckoo implementation. Compared to other hardware systems, CPM is far better in performance and saves 30% of the area.

Keywords

cryptography; parallel processing; pattern matching; Cuckoo hashing; hardware-based multipattern matching; network intrusion detection system; network system intrusion prevention system; parallel Cuckoo pattern matching engine; parallel processing; static pattern set; Algorithm design and analysis; Cyclic redundancy check; Engines; Field programmable gate arrays; Hardware; Intrusion detection; Parallel architectures; Parallel processing; Pattern matching; Throughput; Cuckoo Hashing; FPGA; Massively Parallel Processing; NIDS/NIPS; Pattern Matching;

fLanguage

English

Publisher

ieee

Conference_Titel

Electronic Design, Test and Application, 2010. DELTA '10. Fifth IEEE International Symposium on

Conference_Location

Ho Chi Minh City

Print_ISBN

978-0-7695-3978-2

Electronic_ISBN

978-1-4244-6026-7

Type

conf

DOI

10.1109/DELTA.2010.46

Filename

5438688