Title :
Implementation results of bloom filters for string matching
Author :
Attig, Michael ; Dharmapurikar, Sarang ; Lockwood, John
Author_Institution :
Appl. Res. Lab., Washington Univ., USA
Abstract :
Network intrusion detection and prevention systems (IDPS) use string matching to scan Internet packets for malicious content. Bloom filters offer a mechanism to search for a large number of strings efficiently and concurrently when implemented with field programmable gate array (FPGA) technology. A string matching circuit has been implemented within the FPX platform using Bloom filters. Using 155 block RAMs on a single Xilinx VirtexE 2000 FPGA, the circuit scans for 35,475 unique signatures.
Keywords :
Internet; field programmable gate arrays; message authentication; string matching; transport protocols; 155 block RAM; FPX platform; Internet packets; Xilinx VirtexE 2000 FPGA; bloom filters; field programmable gate arrays; malicious content; network intrusion detection; prevention systems; signature matching; string matching circuit; string search; Circuits; Field programmable gate arrays; Information filtering; Information filters; Internet; Matched filters; Pipelines; Protocols; SDRAM; Search engines;
Conference_Titel :
Field-Programmable Custom Computing Machines, 2004. FCCM 2004. 12th Annual IEEE Symposium on
Print_ISBN :
0-7695-2230-0
DOI :
10.1109/FCCM.2004.41
