Advertisement

Automatic Compilation Framework for Bloom Filter Based Intrusion Detection

  • Dinesh C. Suresh
  • Zhi Guo
  • Betul Buyukkurt
  • Walid A. Najjar
Part of the Lecture Notes in Computer Science book series (LNCS, volume 3985)

Abstract

Virus detection at the router level is rapidly gaining in importance. Hardware-based implementations have the advantage of speed and hence can support a large throughput. In this paper we describe an FPGA-based implementation of the Bloom filter virus detection code that is compiled from the native C to VHDL and mapped onto a Virtex XC2V8000 FPGA. Our results show that a single engine tailored for handling virus signatures of length eight bytes can achieve a throughput of 18.6 Gbps while occupying only 8% of the FPGA area.

Keywords

Hash Function Intrusion Detection Intrusion Detection System Virus Detection Bloom Filter 
These keywords were added by machine and not by the authors. This process is experimental and the keywords may be updated as the learning algorithm improves.

Preview

Unable to display preview. Download preview PDF.

Unable to display preview. Download preview PDF.

References

  1. 1.
    Attig, M., Dharmapurikar, S., Lockwood, J.: Implementation Results of Bloom Filters for String Matching. In: Proceedings of the 12th Annual IEEE Symposium on Field-Programmable Custom Computing Machines (FCCM 2004), pp. 322–323 (2004)Google Scholar
  2. 2.
    Baker, Z., Prasanna, V.K.: High Throughput Linked-Pattern Matching for Intrusion Detection Systems. In: Proceedings of Symposium on Architectures for Networking and Communication Systems (ANCS 2005), Princeton, New Jersey (October 2005)Google Scholar
  3. 3.
    Bloom, B.H.: Space/time tradeoffs in hash coding with allowable errors. Communications of the ACM 13(7), 422–426 (1976)CrossRefMATHGoogle Scholar
  4. 4.
    Cho, Y.H., Smith, W.M.: Specialized Hardware for deep packet filtering. In: Proceedings of the 12th International Conference on Field Programmable Logic and Applications, France (2002)Google Scholar
  5. 5.
    Clark, C.R., Schimmel, D.E.: Scalable Parallel Pattern-Matching on High-Speed Networks. In: IEEE Symposium on Field-Programmable Custom Computing Machines, Napa, California (April 2004)Google Scholar
  6. 6.
    Gokhale, M., Dubois, D., Dubois, A., Boorman, M., Poole, S., Hogsett, V.: Granidt: Towards gigabit rate network intrusion detection technology. In: Proceedings of International Conference on Field Programmable Logic and Applications, pp. 404–413 (2002)Google Scholar
  7. 7.
    Kulkarni, D., Najjar, W., Rinker, R., Kurdahi, F.: Fast Area Estimation to Support Compiler Optimizations in FPGAbased Reconfigurable Systems. In: IEEE Symp. on Field-Programmable Custom Computing Machines (FCCM), Napa, CA (April 2002)Google Scholar
  8. 8.
    Moscola, J., Lockwood, J., Loui, R.P., Pachos, M.: Implementation of a content-scanning module for an internet firewall. In: Proceedings of the IEEE Symposium on Field-Programmable Custom Computing Machines (2003)Google Scholar
  9. 9.
    Papadopoulos, G., Pnevmatikatos, D.: Hashing + Memory = Low Cost, Exact Pattern Matching. In: Proceedings of 15th International Conference on Field Programmable Logic and Applications, Tampere, Finlad (August 2005)Google Scholar
  10. 10.
    Sourdis, I., Pnevmatikatos, D.: Fast, large-scale string match for a 10Gbps FPGA-based network intrustion detection system. In: Proceedings of International Conference on Field Programmable Logic and Applications (2003)Google Scholar
  11. 11.
  12. 12.
  13. 13.
    SUIF Compiler System, http://suif.stanford.edu
  14. 14.
  15. 15.
    Guo, Z., Buyukkurt, B., Najjar, W., Vissers, K.: Optimized Generation of Data-Path from C Codes. In: ACM/IEEE Design Automation and Test Europe (DATE), Munich, Germany (March 2005)Google Scholar

Copyright information

© Springer-Verlag Berlin Heidelberg 2006

Authors and Affiliations

  • Dinesh C. Suresh
    • 1
  • Zhi Guo
    • 2
  • Betul Buyukkurt
    • 1
  • Walid A. Najjar
    • 1
  1. 1.Department of Computer Science and EngineeringUniversity of CaliforniaRiversideUSA
  2. 2.Department of Electrical EngineeringUniversity of CaliforniaRiversideUSA

Personalised recommendations