The Study on matrix based high performance pattern matching by independence partial match 


Vol. 34,  No. 9, pp. 914-922, Sep.  2009


PDF
  Abstract

In this paper, we propose a matrix based real-time pattern matching method, called MDPI, for real-time intrusion detection on several Gbps network traffic. Particularly, in order to minimize a kind of overhead caused by buffering, reordering, and reassembling under the circumstance where the incoming packet sequence is disrupted, MDPI adopts independent partial matching in the case dealing with pattern matching matrix. Consequently, we achieved the performance improvement of the amount of 61% and 50% with respect to TCAM method efficiency through several experiments where the average length of the Snort rule set was maintained as 9 bytes, and w=4 bytes and w=8bytes were assigned, respectively, Moreover, we observed the pattern scan speed of MDPI was 10.941Gbps and the consumption of hardware resource was 5.79LC/Char in the pattern classification of MDPI. This means that MDPI provides the optimal performance compared to hardware complexity. Therefore, by decreasing the hardware cost came from the increased TCAM memory efficiency, MDPI is proven the cost effective high performance intrusion detection technique.

  Statistics
Cumulative Counts from November, 2022
Multiple requests among the same browser session are counted as one view. If you mouse over a chart, the values of data points will be shown.


  Cite this article

[IEEE Style]

W. Jung and T. Kwon, "The Study on matrix based high performance pattern matching by independence partial match," The Journal of Korean Institute of Communications and Information Sciences, vol. 34, no. 9, pp. 914-922, 2009. DOI: .

[ACM Style]

Woo-Sug Jung and Taeck-Geun Kwon. 2009. The Study on matrix based high performance pattern matching by independence partial match. The Journal of Korean Institute of Communications and Information Sciences, 34, 9, (2009), 914-922. DOI: .

[KICS Style]

Woo-Sug Jung and Taeck-Geun Kwon, "The Study on matrix based high performance pattern matching by independence partial match," The Journal of Korean Institute of Communications and Information Sciences, vol. 34, no. 9, pp. 914-922, 9. 2009.

Search
(IN TITLE, AUTHOR, ABSTRACT,KEYWORDS)

Advanced Search ▼

POPULAR KEYWORDS
(TOP 10 KEYWORDS)

Recent Publications
(LAST 3 YEARS)






pISSN : 1226 - 4717
eISSN : 2287 - 3880