Multi-Character Processor Array for Pattern Matching in Network Intrusion Detection System

—Network Intrusion Detection System (NIDS) is a system developed for identifying attacks by using a set of rules. NIDS is an efficient way to provide the security protection for today’s internet. Pattern match algorithm plays an important role in NIDS that performs searches against multiple patterns for a string match. Pattern matching is a computationally expensive task. Traditional software-based NIDS solutions usually can not achieve a high-speed required for ever growing Internet attacks. In order to satisfy high-speed packet content inspection, hardware-implementable pattern match algorithm is required. In this paper, we propose a hardware-based pattern match architecture that employs a multi-character processor array. The proposed multi-character processor array is a parallel and pipelined architecture which can process multiple characters of the input stream per cycle. The proposed architecture can reduce a lot of unnecessary computations and thus it is power efficient. We u...

• Type: Conference
• Year: 2008
• Where: AINA
• Authors: Yeim-Kuan Chang, Ming-Li Tsai, Yu-Ru Chung
• Keywords: AINA 2008, Computer Networks, Multi-character Processor Array, Pattern Match, Pattern Match Algorithm