A New High Performance Multi Gigabit String Matching Engine

Abstract : This paper presents a new high performance hardware implementation of a string matching engine based on a multicharacter variant of the well-known Aho-Corasick algorithm. The proposed architecture is well suited to modern FPGAs. It allows the efficient usage of FPGA's logic and memory resources. Our architecture is optimized to execute string matching in the case of tens of thousands of strings like the ones in intrusion prevention or intrusion detection systems. The proposed design has been validated through the implementation of a search engine on Altera Stratix II FPGA component in the case of a subset of rules in the Snort intrusion detection system. By applying the traffic parallelization and retiming techniques, it was shown that 40 Gbit/s traffic content scanning can be sustained. In comparison with other existing architectures a significant increase in performances has been obtained.
Document type :
Conference papers
Complete list of metadatas

https://hal.inria.fr/inria-00449847
Contributor : François Charot <>
Submitted on : Friday, January 22, 2010 - 6:01:02 PM
Last modification on : Friday, November 16, 2018 - 1:40:02 AM

Identifiers

  • HAL Id : inria-00449847, version 1

Citation

François Charot, Yapi Georges Adouko, Christophe Wolinski. A New High Performance Multi Gigabit String Matching Engine. International Conference on Engineering of Reconfigurable Systems & Algorithms, ERSA 2008, Jul 2007, Las Vegas, United States. pp.90-96. ⟨inria-00449847⟩

Share

Metrics

Record views

271