A New High Performance Multi Gigabit String Matching Engine

Abstract : This paper presents a new high performance hardware implementation of a string matching engine based on a multicharacter variant of the well-known Aho-Corasick algorithm. The proposed architecture is well suited to modern FPGAs. It allows the efficient usage of FPGA's logic and memory resources. Our architecture is optimized to execute string matching in the case of tens of thousands of strings like the ones in intrusion prevention or intrusion detection systems. The proposed design has been validated through the implementation of a search engine on Altera Stratix II FPGA component in the case of a subset of rules in the Snort intrusion detection system. By applying the traffic parallelization and retiming techniques, it was shown that 40 Gbit/s traffic content scanning can be sustained. In comparison with other existing architectures a significant increase in performances has been obtained.
Type de document :
Communication dans un congrès
International Conference on Engineering of Reconfigurable Systems & Algorithms, ERSA 2008, Jul 2007, Las Vegas, United States. pp.90-96, 2008
Liste complète des métadonnées

https://hal.inria.fr/inria-00449847
Contributeur : François Charot <>
Soumis le : vendredi 22 janvier 2010 - 18:01:02
Dernière modification le : mardi 16 janvier 2018 - 15:54:13

Identifiants

  • HAL Id : inria-00449847, version 1

Citation

François Charot, Yapi Georges Adouko, Christophe Wolinski. A New High Performance Multi Gigabit String Matching Engine. International Conference on Engineering of Reconfigurable Systems & Algorithms, ERSA 2008, Jul 2007, Las Vegas, United States. pp.90-96, 2008. 〈inria-00449847〉

Partager

Métriques

Consultations de la notice

220