{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,9,26]],"date-time":"2025-09-26T00:16:07Z","timestamp":1758845767862,"version":"3.41.0"},"reference-count":14,"publisher":"Association for Computing Machinery (ACM)","issue":"1","license":[{"start":{"date-parts":[[2005,3,1]],"date-time":"2005-03-01T00:00:00Z","timestamp":1109635200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":["SIGARCH Comput. Archit. News"],"published-print":{"date-parts":[[2005,3]]},"abstract":"<jats:p>Signature-based Intrusion Detection Systems (IDSs) monitor network traffic for security threats by scanning packet payloads for attack signatures. IDSs have to run at wire speed and need to be configurable to protect against emerging attacks. In this paper we consider the problem of string matching which is the most computationally intensive task in IDS. A configurable string matching accelerator is developed with the focus on increasing throughput while maintaining the configurability provided by the software IDSs. Our preliminary results suggest that the hardware accelerator offers an overall system performance of up to 14Gbps.<\/jats:p>","DOI":"10.1145\/1055626.1055640","type":"journal-article","created":{"date-parts":[[2005,11,7]],"date-time":"2005-11-07T19:28:32Z","timestamp":1131391712000},"page":"99-107","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":70,"title":["Configurable string matching hardware for speeding up intrusion detection"],"prefix":"10.1145","volume":"33","author":[{"given":"Monther","family":"Aldwairi","sequence":"first","affiliation":[{"name":"North Carolina State University, Raleigh NC"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Thomas","family":"Conte","sequence":"additional","affiliation":[{"name":"North Carolina State University, Raleigh NC"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Paul","family":"Franzon","sequence":"additional","affiliation":[{"name":"North Carolina State University, Raleigh NC"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2005,3]]},"reference":[{"key":"e_1_2_1_1_1","volume-title":"Proceedings of LISA99","author":"Roesch M.","year":"1999","unstructured":"M. Roesch . Snort - lightweight intrusion detection for networks , in Proceedings of LISA99 , the 13th Systems Administration Conference. 1999 . M. Roesch. Snort - lightweight intrusion detection for networks, in Proceedings of LISA99, the 13th Systems Administration Conference. 1999."},{"key":"e_1_2_1_2_1","doi-asserted-by":"publisher","DOI":"10.1145\/360825.360855"},{"key":"e_1_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.1145\/359842.359859"},{"key":"e_1_2_1_4_1","doi-asserted-by":"publisher","DOI":"10.1145\/974044.974078"},{"key":"e_1_2_1_5_1","doi-asserted-by":"publisher","DOI":"10.5555\/1058426.1058885"},{"key":"e_1_2_1_6_1","volume-title":"IEEE Symposium on Field-Programmable Custom Computing Machines (FCCM02)","author":"Carver D.","year":"2002","unstructured":"D. Carver , R. Franklin , and B. Hutchings . Assisting network intrusion detection with reconfigurable hardware . In IEEE Symposium on Field-Programmable Custom Computing Machines (FCCM02) , April 2002 . D. Carver, R. Franklin, and B. Hutchings. Assisting network intrusion detection with reconfigurable hardware. In IEEE Symposium on Field-Programmable Custom Computing Machines (FCCM02), April 2002."},{"key":"e_1_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-45234-8_85"},{"key":"e_1_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.5555\/1025123.1025835"},{"key":"e_1_2_1_9_1","volume-title":"the 12th Annual IEEE Symposium on Field-Programmable Custom Computing Machines (FCCM '04)","author":"Dharmapurikar S.","year":"2004","unstructured":"S. Dharmapurikar , M. Attig and J. Lockwood . Design and Implementation of a String Matching System for Network Intrusion Detection using FPGA-based Bloom Filters . In the 12th Annual IEEE Symposium on Field-Programmable Custom Computing Machines (FCCM '04) , April 2004 S. Dharmapurikar, M. Attig and J. Lockwood. Design and Implementation of a String Matching System for Network Intrusion Detection using FPGA-based Bloom Filters. In the 12th Annual IEEE Symposium on Field-Programmable Custom Computing Machines (FCCM '04), April 2004"},{"key":"e_1_2_1_10_1","volume-title":"S. Navab and W. Mangione-Smith. Specialized Hardware for Deep Network Packet Filtering. In Proceedings 12th International Conference on Field-Programmable Logic and Applications","author":"Cho Y.","year":"2002","unstructured":"Y. Cho , S. Navab and W. Mangione-Smith. Specialized Hardware for Deep Network Packet Filtering. In Proceedings 12th International Conference on Field-Programmable Logic and Applications , Sept. 2002 Y. Cho, S. Navab and W. Mangione-Smith. Specialized Hardware for Deep Network Packet Filtering. In Proceedings 12th International Conference on Field-Programmable Logic and Applications, Sept. 2002"},{"key":"e_1_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.5555\/647929.740231"},{"volume-title":"SEP 2002","author":"Fisk M.","key":"e_1_2_1_12_1","unstructured":"M. Fisk and G. Varghese . Applying Fast String Matching to Intrusion Detection , SEP 2002 M. Fisk and G. Varghese. Applying Fast String Matching to Intrusion Detection, SEP 2002"},{"key":"e_1_2_1_13_1","volume-title":"Deterministic Memory-Efficient String Matching Algorithms for Intrusion Detection. In proceedings of the IEEE Infocom conference","author":"Tuck N.","year":"2004","unstructured":"N. Tuck , T. Sherwood , B. Calder and G. Varghese . Deterministic Memory-Efficient String Matching Algorithms for Intrusion Detection. In proceedings of the IEEE Infocom conference , March 2004 . N. Tuck, T. Sherwood, B. Calder and G. Varghese. Deterministic Memory-Efficient String Matching Algorithms for Intrusion Detection. In proceedings of the IEEE Infocom conference, March 2004."},{"key":"e_1_2_1_14_1","unstructured":"http:\/\/research.compaq.com\/wrl\/people\/jouppi\/CACTI.html http:\/\/research.compaq.com\/wrl\/people\/jouppi\/CACTI.html"}],"container-title":["ACM SIGARCH Computer Architecture News"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/1055626.1055640","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/1055626.1055640","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T16:31:27Z","timestamp":1750264287000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/1055626.1055640"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2005,3]]},"references-count":14,"journal-issue":{"issue":"1","published-print":{"date-parts":[[2005,3]]}},"alternative-id":["10.1145\/1055626.1055640"],"URL":"https:\/\/doi.org\/10.1145\/1055626.1055640","relation":{},"ISSN":["0163-5964"],"issn-type":[{"type":"print","value":"0163-5964"}],"subject":[],"published":{"date-parts":[[2005,3]]},"assertion":[{"value":"2005-03-01","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}