Implementation results of bloom filters for string matching

Author

Attig, Michael ; Dharmapurikar, Sarang ; Lockwood, John

Author_Institution

Appl. Res. Lab., Washington Univ., USA

fYear

2004

fDate

20-23 April 2004

Firstpage

322

Lastpage

323

Abstract

Network intrusion detection and prevention systems (IDPS) use string matching to scan Internet packets for malicious content. Bloom filters offer a mechanism to search for a large number of strings efficiently and concurrently when implemented with field programmable gate array (FPGA) technology. A string matching circuit has been implemented within the FPX platform using Bloom filters. Using 155 block RAMs on a single Xilinx VirtexE 2000 FPGA, the circuit scans for 35,475 unique signatures.

Keywords

Internet; field programmable gate arrays; message authentication; string matching; transport protocols; 155 block RAM; FPX platform; Internet packets; Xilinx VirtexE 2000 FPGA; bloom filters; field programmable gate arrays; malicious content; network intrusion detection; prevention systems; signature matching; string matching circuit; string search; Circuits; Field programmable gate arrays; Information filtering; Information filters; Internet; Matched filters; Pipelines; Protocols; SDRAM; Search engines;

fLanguage

English

Publisher

ieee

Conference_Titel

Field-Programmable Custom Computing Machines, 2004. FCCM 2004. 12th Annual IEEE Symposium on

Print_ISBN

0-7695-2230-0

Type

conf

DOI

10.1109/FCCM.2004.41

Filename

1364659

Link To Document

https://search.isc.ac/dl/search/defaultta.aspx?DTC=49&DC=2041683