A High-Speed Network Content Filtering System

Abstract : Current software based Content Filtering Systems are too computing intensive in large scale packets payload detection and cannot meet the performance requirements of modern networks. Thus, hardware architectures are desired to speed up the detection process. In this paper, hardware based Conjoint Network Content Filtering System (CNCFS) is proposed to solve the problem. In CNCFS, a TCAM based algorithm named Linking Shared Multi-Match (LSMM) is implemented, which can speed up large scale Multi-Pattern Multi-Matching greatly. Also, this system can also be used in high speed mobile networks which need to deal with the security of fast handover of mobile users. The results of performance evaluation show that our solution can provide 5 Gbps wire speed processing capability.
Complete list of metadatas

Cited literature [14 references]  Display  Hide  Download

https://hal.inria.fr/hal-01404003
Contributor : Hal Ifip <>
Submitted on : Monday, November 28, 2016 - 11:27:44 AM
Last modification on : Tuesday, September 3, 2019 - 3:04:02 PM
Long-term archiving on: Monday, March 20, 2017 - 7:29:56 PM

File

978-3-319-10975-6_20_Chapter.p...
Files produced by the author(s)

Licence


Distributed under a Creative Commons Attribution 4.0 International License

Identifiers

Citation

Guohong Zhao, Shuhui Chen, Baokang Zhao, Ilsun You, Jinshu Su, et al.. A High-Speed Network Content Filtering System. International Cross-Domain Conference and Workshop on Availability, Reliability, and Security (CD-ARES), Sep 2014, Fribourg, Switzerland. pp.257-269, ⟨10.1007/978-3-319-10975-6_20⟩. ⟨hal-01404003⟩

Share

Metrics

Record views

294

Files downloads

247