Title :
Architectures for Bit-Split String Scanning in Intrusion Detection
Author :
Tan, Lin ; Sherwood, Timothy
Author_Institution :
Illinois Univ., Urbana, IL
Abstract :
String matching is a critical element of modern intrusion detection systems because it lets a system make decisions based not just on headers, but actual content flowing through the network. Through careful codesign and optimization of an architecture with a new string matching algorithm, the authors show it is possible to build a system that is almost 12 times more efficient than the currently best known approaches
Keywords :
security of data; string matching; telecommunication security; bit-split string scanning; intrusion detection systems; network security; string matching algorithm; Computer architecture; Databases; Displays; Information security; Intrusion detection; Monitoring; Partitioning algorithms; Program processors; Protection; Telecommunication traffic; Bit-split string; intrusion detection; string matching;
Journal_Title :
Micro, IEEE