Advertisement

Implementation of Compressed Brute-Force Pattern Search Algorithm Using VHDL

  • Lokesh Sharma
  • Bhawana Sharma
  • Devi Prasad Sharma
Conference paper
Part of the Smart Innovation, Systems and Technologies book series (SIST, volume 28)

Abstract

High speed and always-on network access is becoming commonplace around the world, creating a demand for increased network security. Network Intrusion Detection Systems (NIDS) attempt to detect and prevent attacks from the network using pattern-matching rules. Data compression methods are used to reduce the data storage requirement. Searching a compressed pattern in the compressed text reduces the internal storage requirement and computation resources. In this paper we implemented search process to perform compressed pattern matching in binary Huffman encoded texts. Brute-Force Search algorithm is applied comparing a single bit per clock cycle and comparing an encoded character per clock cycle. Pattern matching processes are evaluated in terms of clock cycle.

Keywords

NIDS Brute-Force Pattern Search Huffman Coding 

Preview

Unable to display preview. Download preview PDF.

Unable to display preview. Download preview PDF.

References

  1. 1.
    Amir, A., Benson, G.: Two Dimensional Compressed Matching. In: Proceedings of Data Compression Conference (DCC), pp. 279–288 (1992)Google Scholar
  2. 2.
    Huffman, D.A.: A method for the construction of minimum-redundancy codes. In: Proceedings of the IRE, pp. 1098–1101 (1952)Google Scholar
  3. 3.
  4. 4.
    Dubrawsky, I.: Firewall Evolution - Deep Packet Inspection (2003)Google Scholar
  5. 5.
    Mukherjee, B., Heberlein, L.T., Levitt, K.N.: Network Intrusion Detection. IEEE Network, 26–48 (1994)Google Scholar
  6. 6.
    Fisk, M., Varghese, G.: An analysis of fast string matching applied to content based for-warding and intrusion detection. In: Technical Report CS2001-0670, University of California (2002)Google Scholar
  7. 7.
    Buboltz, J., Kocak, T.: Front End Device for Content Networking. In: Proceedings of the Conference on Design, Automation and Test in Europe (2008)Google Scholar
  8. 8.
    Karp, R.M., Rabin, M.O.: Efficient randomized pattern-matching algorithms. IBM Journal of Research and Development 31(2), 249–260 (1987)MathSciNetCrossRefMATHGoogle Scholar
  9. 9.
    Knuth, D.E., Morris, J., Pratt, V.R.: Fast pattern matching in strings. SIAM Journal on Computing (1977)Google Scholar
  10. 10.
    Baker, Z.K., Prasanna, Z.K.,, V.K.: A methodology for synthesis of efficient intrusion detection systems on FPGAs. In: IEEE Symposium on Field-Programmable Custom Computing Machines (2004)Google Scholar
  11. 11.
    Sidhu, R., Mei, A., Prasanna, V.K.: String matching on multi-content FPGAs using self-reconfiguration. In: Proceedings of FPGA 1999 (1999)Google Scholar
  12. 12.
    Ashenden, P.J.: Modeling digital systems using VHDL. In: Proceedings of Potentials of IEE, vol. 17(2), pp. 27–30 (1998)Google Scholar
  13. 13.
    Sidhu, R., Prasanna, V.K.: Fast regular expression matching using FPGAs. In: IEEE Symposium on Field-Programmable Custom Computing Machines (2001)Google Scholar
  14. 14.
    Mukherjee, A., Acharya, T.: VlSI Algorithms for Compressed Pattern Search Using Tree Based Codes. In: Proceedings of the IEEE International Conference on Application Specific Array Processors (1995)Google Scholar
  15. 15.
    Clark, C.R., Schimmel, D.E.: Efficient reconfigurable logic circuit for matching complex network intrusion detection patterns. In: Cheung, P.Y.K., Constantinides, G.A. (eds.) FPL 2003. LNCS, vol. 2778, pp. 956–959. Springer, Heidelberg (2003)CrossRefGoogle Scholar

Copyright information

© Springer International Publishing Switzerland 2014

Authors and Affiliations

  • Lokesh Sharma
    • 1
  • Bhawana Sharma
    • 2
  • Devi Prasad Sharma
    • 1
  1. 1.Manipur UniversityJaipurIndia
  2. 2.Amity UniversityJaipurIndia

Personalised recommendations