{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2024,9,5]],"date-time":"2024-09-05T19:18:44Z","timestamp":1725563924697},"publisher-location":"Berlin, Heidelberg","reference-count":40,"publisher":"Springer Berlin Heidelberg","isbn-type":[{"type":"print","value":"9783642155116"},{"type":"electronic","value":"9783642155123"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2010]]},"DOI":"10.1007\/978-3-642-15512-3_4","type":"book-chapter","created":{"date-parts":[[2010,8,31]],"date-time":"2010-08-31T08:27:39Z","timestamp":1283243259000},"page":"58-78","source":"Crossref","is-referenced-by-count":19,"title":["Improving NFA-Based Signature Matching Using Ordered Binary Decision Diagrams"],"prefix":"10.1007","author":[{"given":"Liu","family":"Yang","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Rezwana","family":"Karim","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Vinod","family":"Ganapathy","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Randy","family":"Smith","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","reference":[{"key":"4_CR1","doi-asserted-by":"crossref","unstructured":"Becchi, M.: Data Structures, Algorithms and Architectures for Efficient Regular Expression Evaluation. PhD thesis, Washington University in St. Louis (2009)","DOI":"10.1145\/1477942.1477950"},{"key":"4_CR2","first-page":"339","volume-title":"ACM SIGCOMM Conference","author":"S. Kumar","year":"2006","unstructured":"Kumar, S., Dharmapurikar, S., Yu, F., Crowley, P., Turner, J.: Algorithms to accelerate multiple regular expressions matching for deep packet inspection. In: ACM SIGCOMM Conference, pp. 339\u2013350. ACM, New York (2006)"},{"key":"4_CR3","first-page":"207","volume-title":"SIGCOMM Conference","author":"R. Smith","year":"2008","unstructured":"Smith, R., Estan, C., Jha, S., Kong, S.: Deflating the Big Bang: Fast and scalable deep packet inspection with extended finite automata. In: SIGCOMM Conference, pp. 207\u2013218. ACM, New York (2008)"},{"key":"4_CR4","doi-asserted-by":"crossref","unstructured":"Yu, F., Chen, Z., Diao, Y., Lakshman, T.V., Katz, R.H.: Fast and memory-efficient regular expression matching for deep packet inspection. In: ACM\/IEEE Symp. on Arch. for Networking and Comm. Systems, pp. 93\u2013102 (2006)","DOI":"10.1145\/1185347.1185360"},{"key":"4_CR5","unstructured":"Roesch, M.: Snort - lightweight intrusion detection for networks. In: USENIX Conf. on System Administration, USENIX, pp. 229\u2013238 (1999)"},{"key":"4_CR6","volume-title":"Introduction to Automata Theory, Languages, and Computation","author":"J.E. Hopcroft","year":"2007","unstructured":"Hopcroft, J.E., Motwani, R., Ullman, J.D.: Introduction to Automata Theory, Languages, and Computation, 3rd edn. Addison-Wesley, Reading (2007)","edition":"3"},{"key":"4_CR7","first-page":"145","volume-title":"Intl. Conf. on Architectures for Networking and Communication Systems","author":"M. Becchi","year":"2007","unstructured":"Becchi, M., Crowley, P.: An improved algorithm to accelerate regular expression evaluation. In: Intl. Conf. on Architectures for Networking and Communication Systems, pp. 145\u2013154. ACM, New York (2007)"},{"key":"4_CR8","first-page":"187","volume-title":"Symp. on Security and Privacy","author":"R. Smith","year":"2008","unstructured":"Smith, R., Estan, C., Jha, S.: XFA: Faster signature matching with extended automata. In: Symp. on Security and Privacy, pp. 187\u2013201. IEEE Computer Society, Los Alamitos (2008)"},{"key":"4_CR9","first-page":"227","volume-title":"Symp. on Field-Programmable Custom Computing Machines","author":"R. Sidhu","year":"2001","unstructured":"Sidhu, R., Prasanna, V.: Fast regular expression matching using FPGAs. In: Symp. on Field-Programmable Custom Computing Machines, pp. 227\u2013238. IEEE Computer Society, Los Alamitos (2001)"},{"key":"4_CR10","doi-asserted-by":"publisher","first-page":"249","DOI":"10.1109\/FCCM.2004.50","volume-title":"IEEE Symp. on Field-Programmable Custom Computing Machines","author":"C.R. Clark","year":"2004","unstructured":"Clark, C.R., Schimmel, D.E.: Scalable pattern matching for high-speed networks. In: IEEE Symp. on Field-Programmable Custom Computing Machines, pp. 249\u2013257. IEEE Computer Society, Los Alamitos (2004)"},{"issue":"8","key":"4_CR11","doi-asserted-by":"publisher","first-page":"677","DOI":"10.1109\/TC.1986.1676819","volume":"35","author":"R.E. Bryant","year":"1986","unstructured":"Bryant, R.E.: Graph-based algorithms for Boolean function manipulation. IEEE Transactions on Computers\u00a035(8), 677\u2013691 (1986)","journal-title":"IEEE Transactions on Computers"},{"key":"4_CR12","first-page":"401","volume-title":"Symp. on Logic in Computer Science","author":"J.R. Burch","year":"1990","unstructured":"Burch, J.R., Clarke, E.M., McMillan, K.L., Dill, D.L., Hwang, J.: Symbolic model checking: 1020 states and beyond. In: Symp. on Logic in Computer Science, pp. 401\u2013424. IEEE Computer Society, Los Alamitos (1990)"},{"issue":"6","key":"4_CR13","doi-asserted-by":"publisher","first-page":"419","DOI":"10.1145\/363347.363387","volume":"11","author":"K. Thompson","year":"1968","unstructured":"Thompson, K.: Programming techniques: Regular expression search algorithm. ACM Commun.\u00a011(6), 419\u2013422 (1968)","journal-title":"ACM Commun."},{"key":"4_CR14","unstructured":"Somenzi, F.: CUDD: CU decision diagram package, release 2.4.2 Department of Electrical, Computer, and Energy Engineering, University of Colorado at Boulder, http:\/\/vlsi.colorado.edu\/~fabio\/CUDD"},{"key":"4_CR15","unstructured":"Signatures referenced in Section 4 and Section 5, http:\/\/www.cs.rutgers.edu\/~vinodg\/papers\/raid2010"},{"key":"4_CR16","unstructured":"PCRE: The Perl compatible regular expression library, http:\/\/www.pcre.org"},{"key":"4_CR17","unstructured":"Cox, R.: Regular expression matching can be simple and fast (but is slow in Java, Perl, PHP, Python, Ruby, ...) (2007), http:\/\/swtch.com\/~rsc\/regexp\/regexp1.html ."},{"key":"4_CR18","first-page":"89","volume-title":"Annual Computer Security Applications Conf.","author":"R. Smith","year":"2006","unstructured":"Smith, R., Estan, C., Jha, S.: Backtracking algorithmic complexity attacks against a NIDS. In: Annual Computer Security Applications Conf., pp. 89\u201398. IEEE Computer Society, Los Alamitos (2006)"},{"key":"4_CR19","first-page":"262","volume-title":"Conf. on Computer and Comm. Security","author":"R. Sommer","year":"2003","unstructured":"Sommer, R., Paxson, V.: Enhancing byte-level network intrusion detection signatures with context. In: Conf. on Computer and Comm. Security, pp. 262\u2013271. ACM, New York (2003)"},{"key":"4_CR20","doi-asserted-by":"crossref","unstructured":"Becchi, M., Crowley, P.: A hybrid finite automaton for practical deep packet inspection. In: Intl. Conf. on emerging Networking EXperiments and Technologies (2007)","DOI":"10.1145\/1364654.1364656"},{"key":"4_CR21","first-page":"191","volume-title":"Intl. Symp. Computer Architecture","author":"B.C. Brodie","year":"2006","unstructured":"Brodie, B.C., Taylor, D.E., Cytron, R.K.: A scalable architecture for high-throughput regular-expression pattern matching. In: Intl. Symp. Computer Architecture, pp. 191\u2013202. IEEE Computer Society, Los Alamitos (2006)"},{"key":"4_CR22","first-page":"50","volume-title":"Intl. Conf. on Architectures for Networking and Communication Systems","author":"M. Becchi","year":"2008","unstructured":"Becchi, M., Crowley, P.: Efficient regular expression evaluation: Theory to practice. In: Intl. Conf. on Architectures for Networking and Communication Systems, pp. 50\u201359. ACM, New York (2008)"},{"issue":"6","key":"4_CR23","doi-asserted-by":"publisher","first-page":"333","DOI":"10.1145\/360825.360855","volume":"18","author":"A.V. Aho","year":"1975","unstructured":"Aho, A.V., Corasick, M.J.: Efficient string matching: An aid to bibliographic search. ACM Comm.\u00a018(6), 333\u2013340 (1975)","journal-title":"ACM Comm."},{"issue":"10","key":"4_CR24","doi-asserted-by":"publisher","first-page":"1781","DOI":"10.1109\/JSAC.2006.877131","volume":"24","author":"S. Dharmapurikar","year":"2006","unstructured":"Dharmapurikar, S., Lockwood, J.W.: Fast and scalable pattern matching for network intrusion detection systems. Jour. on Selected Areas in Comm.\u00a024(10), 1781\u20131792 (2006)","journal-title":"Jour. on Selected Areas in Comm."},{"issue":"3","key":"4_CR25","doi-asserted-by":"publisher","first-page":"614","DOI":"10.1145\/1015047.1015055","volume":"3","author":"R. Liu","year":"2004","unstructured":"Liu, R., Huang, N., Chen, C., Kao, C.: A fast string-matching algorithm for network processor-based intrusion detection system. Trans. on Embedded Computing Sys.\u00a03(3), 614\u2013633 (2004)","journal-title":"Trans. on Embedded Computing Sys."},{"key":"4_CR26","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"crossref","first-page":"880","DOI":"10.1007\/978-3-540-45234-8_85","volume-title":"Field Programmable Logic and Application","author":"I. Sourdis","year":"2003","unstructured":"Sourdis, I., Pnevmatikatos, D.: Fast, large-scale string match for a 10Gbps FPGA-based network intrusion detection system. In: Cheung, P., Constantinides, G., Sousa, J. (eds.) FPL 2003. LNCS, vol.\u00a02778, pp. 880\u2013889. Springer, Heidelberg (2003)"},{"key":"4_CR27","first-page":"112","volume-title":"Intl. Symp. Computer Architecture","author":"L. Tan","year":"2005","unstructured":"Tan, L., Sherwood, T.: A high throughput string matching architecture for intrusion detection and prevention. In: Intl. Symp. Computer Architecture, pp. 112\u2013122. IEEE Computer Society, Los Alamitos (2005)"},{"key":"4_CR28","first-page":"333","volume-title":"IEEE INFOCOM 2004","author":"N. Tuck","year":"2004","unstructured":"Tuck, N., Sherwood, T., Calder, B., Varghese, G.: Deterministic memory-efficient string matching algorithms for intrusion detection. In: IEEE INFOCOM 2004, pp. 333\u2013340. IEEE Computer Society, Los Alamitos (2004)"},{"key":"4_CR29","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"116","DOI":"10.1007\/978-3-540-87403-4_7","volume-title":"Recent Advances in Intrusion Detection","author":"G. Vasiliadis","year":"2008","unstructured":"Vasiliadis, G., Antonatos, S., Polychronakis, M., Markatos, E.P., Ioannidis, S.: Gnort: High performance network intrusion detection using graphics processors. In: Lippmann, R., Kirda, E., Trachtenberg, A. (eds.) RAID 2008. LNCS, vol.\u00a05230, pp. 116\u2013134. Springer, Heidelberg (2008)"},{"key":"4_CR30","unstructured":"Handley, M., Paxson, V., Kreibich, C.: Network intrusion detection: Evasion, traffic normalization, and end-to-end protocol semantics. In: Usenix Security, p. 9. USENIX (2001)"},{"key":"4_CR31","unstructured":"Jordan, M.: Dealing with metamorphism. Virus Bulletin Weekly (2002)"},{"key":"4_CR32","unstructured":"Ptacek, T., Newsham, T.: Insertion, evasion and denial of service: Eluding network intrusion detection, http:\/\/insecure.org\/stf\/secnet_ids\/secnet_ids.html ."},{"key":"4_CR33","first-page":"44","volume-title":"Symp. on Security and Privacy","author":"U. Shankar","year":"2003","unstructured":"Shankar, U., Paxson, V.: Active mapping: Resisting NIDS evasion without altering traffic. In: Symp. on Security and Privacy, pp. 44\u201361. IEEE Computer Society, Los Alamitos (2003)"},{"key":"4_CR34","unstructured":"TippingPoint, http:\/\/www.tippingpoint.com"},{"key":"4_CR35","unstructured":"LSI-Corporation: Tarari RegEx content processor, http:\/\/www.tarari.com"},{"key":"4_CR36","unstructured":"Cisco: IOS terminal services configuration guide, http:\/\/tinyurl.com\/2eouvq"},{"key":"4_CR37","doi-asserted-by":"publisher","first-page":"111","DOI":"10.1109\/FPGA.2002.1106666","volume-title":"Annual Symp. on Field-Programmable Custom Computing Machines","author":"B.L. Hutchings","year":"2002","unstructured":"Hutchings, B.L., Franklin, R., Carver, D.: Assisting network intrusion detection with reconfigurable hardware. In: Annual Symp. on Field-Programmable Custom Computing Machines, pp. 111\u2013120. IEEE Computer Society, Los Alamitos (2002)"},{"key":"4_CR38","first-page":"127","volume-title":"Symp. on Arch. for Networking and Comm. Systems","author":"A. Mitra","year":"2007","unstructured":"Mitra, A., Najjar, W., Bhuyan, L.: Compiling PCRE to FPGA for accelerating Snort IDS. In: Symp. on Arch. for Networking and Comm. Systems, pp. 127\u2013136. ACM, New York (2007)"},{"key":"4_CR39","doi-asserted-by":"publisher","first-page":"444","DOI":"10.1109\/FPL.2005.1515762","volume-title":"Intl. Conf. on Field Prog. Logic and Applications","author":"S. Yusuf","year":"2005","unstructured":"Yusuf, S., Luk, W.: Bitwise optimized CAM for network intrusion detection systems. In: Intl. Conf. on Field Prog. Logic and Applications, pp. 444\u2013449. IEEE Press, Los Alamitos (2005)"},{"key":"4_CR40","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"638","DOI":"10.1007\/3-540-44687-7_70","volume-title":"Field-Programmable Logic and Applications","author":"R. Sinnappan","year":"2001","unstructured":"Sinnappan, R., Hazelhurst, S.: A reconfigurable approach to packet filtering. In: Brebner, G., Woods, R. (eds.) FPL 2001. LNCS, vol.\u00a02147, pp. 638\u2013642. Springer, Heidelberg (2001)"}],"container-title":["Lecture Notes in Computer Science","Recent Advances in Intrusion Detection"],"original-title":[],"link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-642-15512-3_4.pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2020,11,23]],"date-time":"2020-11-23T22:09:23Z","timestamp":1606169363000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/978-3-642-15512-3_4"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2010]]},"ISBN":["9783642155116","9783642155123"],"references-count":40,"URL":"https:\/\/doi.org\/10.1007\/978-3-642-15512-3_4","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"type":"print","value":"0302-9743"},{"type":"electronic","value":"1611-3349"}],"subject":[],"published":{"date-parts":[[2010]]}}}