Efficient packet pattern matching for gigabit network intrusion detection using GPUs

Che Lun Hung; Chun Yuan Lin; Hsiao Hsi Wang; Chin Yuan Chang

doi:10.1109/HPCC.2012.235

Efficient packet pattern matching for gigabit network intrusion detection using GPUs

Che Lun Hung^*
, Chun Yuan Lin
, Hsiao Hsi Wang
, Chin Yuan Chang

^*Corresponding author for this work

Providence University Taiwan

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

10 Scopus citations

Abstract

With the rapid development of network hardware technologies and network bandwidth, the high link speeds and huge amount of threats poses challenges to network intrusion detection systems, which must handle the higher network traffic and perform more complicated packet processing. In general, pattern matching is a highly computationally intensive process part of network intrusion detection systems. In this paper, we present an efficient GPU-based pattern matching algorithm by leveraging the computational power of GPUs to accelerate the pattern matching operations to increase the over-all processing throughput. From the experiment results, the proposed algorithm achieved a maximum traffic processing throughput of 2.4 Gbit/s. The results demonstrate that GPUs can be used effectively to speed up intrusion detection systems.

Original language	English
Title of host publication	Proceedings of the 14th IEEE International Conference on High Performance Computing and Communications, HPCC-2012 - 9th IEEE International Conference on Embedded Software and Systems, ICESS-2012
Pages	1612-1617
Number of pages	6
DOIs	https://doi.org/10.1109/HPCC.2012.235
State	Published - 2012
Event	14th IEEE International Conference on High Performance Computing and Communications, HPCC-2012 - 9th IEEE International Conference on Embedded Software and Systems, ICESS-2012 - Liverpool, United Kingdom Duration: 25 06 2012 → 27 06 2012

Publication series

Name	Proceedings of the 14th IEEE International Conference on High Performance Computing and Communications, HPCC-2012 - 9th IEEE International Conference on Embedded Software and Systems, ICESS-2012

Conference

Conference	14th IEEE International Conference on High Performance Computing and Communications, HPCC-2012 - 9th IEEE International Conference on Embedded Software and Systems, ICESS-2012
Country/Territory	United Kingdom
City	Liverpool
Period	25/06/12 → 27/06/12

Keywords

GPU
Intrusion Dection Systems
Parallel Processing
Patttern Matching

Access to Document

10.1109/HPCC.2012.235

Cite this

Hung, C. L., Lin, C. Y., Wang, H. H., & Chang, C. Y. (2012). Efficient packet pattern matching for gigabit network intrusion detection using GPUs. In Proceedings of the 14th IEEE International Conference on High Performance Computing and Communications, HPCC-2012 - 9th IEEE International Conference on Embedded Software and Systems, ICESS-2012 (pp. 1612-1617). Article 6332370 (Proceedings of the 14th IEEE International Conference on High Performance Computing and Communications, HPCC-2012 - 9th IEEE International Conference on Embedded Software and Systems, ICESS-2012). https://doi.org/10.1109/HPCC.2012.235

Hung, Che Lun ; Lin, Chun Yuan ; Wang, Hsiao Hsi et al. / Efficient packet pattern matching for gigabit network intrusion detection using GPUs. Proceedings of the 14th IEEE International Conference on High Performance Computing and Communications, HPCC-2012 - 9th IEEE International Conference on Embedded Software and Systems, ICESS-2012. 2012. pp. 1612-1617 (Proceedings of the 14th IEEE International Conference on High Performance Computing and Communications, HPCC-2012 - 9th IEEE International Conference on Embedded Software and Systems, ICESS-2012).

@inproceedings{e19717be5e584726bf7ff0c5cb2c3156,

title = "Efficient packet pattern matching for gigabit network intrusion detection using GPUs",

abstract = "With the rapid development of network hardware technologies and network bandwidth, the high link speeds and huge amount of threats poses challenges to network intrusion detection systems, which must handle the higher network traffic and perform more complicated packet processing. In general, pattern matching is a highly computationally intensive process part of network intrusion detection systems. In this paper, we present an efficient GPU-based pattern matching algorithm by leveraging the computational power of GPUs to accelerate the pattern matching operations to increase the over-all processing throughput. From the experiment results, the proposed algorithm achieved a maximum traffic processing throughput of 2.4 Gbit/s. The results demonstrate that GPUs can be used effectively to speed up intrusion detection systems.",

keywords = "GPU, Intrusion Dection Systems, Parallel Processing, Patttern Matching",

author = "Hung, \{Che Lun\} and Lin, \{Chun Yuan\} and Wang, \{Hsiao Hsi\} and Chang, \{Chin Yuan\}",

year = "2012",

doi = "10.1109/HPCC.2012.235",

language = "英语",

isbn = "9780769547497",

series = "Proceedings of the 14th IEEE International Conference on High Performance Computing and Communications, HPCC-2012 - 9th IEEE International Conference on Embedded Software and Systems, ICESS-2012",

pages = "1612--1617",

booktitle = "Proceedings of the 14th IEEE International Conference on High Performance Computing and Communications, HPCC-2012 - 9th IEEE International Conference on Embedded Software and Systems, ICESS-2012",

note = "14th IEEE International Conference on High Performance Computing and Communications, HPCC-2012 - 9th IEEE International Conference on Embedded Software and Systems, ICESS-2012 ; Conference date: 25-06-2012 Through 27-06-2012",

}

Hung, CL, Lin, CY, Wang, HH & Chang, CY 2012, Efficient packet pattern matching for gigabit network intrusion detection using GPUs. in Proceedings of the 14th IEEE International Conference on High Performance Computing and Communications, HPCC-2012 - 9th IEEE International Conference on Embedded Software and Systems, ICESS-2012., 6332370, Proceedings of the 14th IEEE International Conference on High Performance Computing and Communications, HPCC-2012 - 9th IEEE International Conference on Embedded Software and Systems, ICESS-2012, pp. 1612-1617, 14th IEEE International Conference on High Performance Computing and Communications, HPCC-2012 - 9th IEEE International Conference on Embedded Software and Systems, ICESS-2012, Liverpool, United Kingdom, 25/06/12. https://doi.org/10.1109/HPCC.2012.235

Efficient packet pattern matching for gigabit network intrusion detection using GPUs. / Hung, Che Lun; Lin, Chun Yuan; Wang, Hsiao Hsi et al.
Proceedings of the 14th IEEE International Conference on High Performance Computing and Communications, HPCC-2012 - 9th IEEE International Conference on Embedded Software and Systems, ICESS-2012. 2012. p. 1612-1617 6332370 (Proceedings of the 14th IEEE International Conference on High Performance Computing and Communications, HPCC-2012 - 9th IEEE International Conference on Embedded Software and Systems, ICESS-2012).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

TY - GEN

T1 - Efficient packet pattern matching for gigabit network intrusion detection using GPUs

AU - Hung, Che Lun

AU - Lin, Chun Yuan

AU - Wang, Hsiao Hsi

AU - Chang, Chin Yuan

PY - 2012

Y1 - 2012

N2 - With the rapid development of network hardware technologies and network bandwidth, the high link speeds and huge amount of threats poses challenges to network intrusion detection systems, which must handle the higher network traffic and perform more complicated packet processing. In general, pattern matching is a highly computationally intensive process part of network intrusion detection systems. In this paper, we present an efficient GPU-based pattern matching algorithm by leveraging the computational power of GPUs to accelerate the pattern matching operations to increase the over-all processing throughput. From the experiment results, the proposed algorithm achieved a maximum traffic processing throughput of 2.4 Gbit/s. The results demonstrate that GPUs can be used effectively to speed up intrusion detection systems.

AB - With the rapid development of network hardware technologies and network bandwidth, the high link speeds and huge amount of threats poses challenges to network intrusion detection systems, which must handle the higher network traffic and perform more complicated packet processing. In general, pattern matching is a highly computationally intensive process part of network intrusion detection systems. In this paper, we present an efficient GPU-based pattern matching algorithm by leveraging the computational power of GPUs to accelerate the pattern matching operations to increase the over-all processing throughput. From the experiment results, the proposed algorithm achieved a maximum traffic processing throughput of 2.4 Gbit/s. The results demonstrate that GPUs can be used effectively to speed up intrusion detection systems.

KW - GPU

KW - Intrusion Dection Systems

KW - Parallel Processing

KW - Patttern Matching

UR - https://www.scopus.com/pages/publications/84870432780

U2 - 10.1109/HPCC.2012.235

DO - 10.1109/HPCC.2012.235

M3 - 会议稿件

AN - SCOPUS:84870432780

SN - 9780769547497

T3 - Proceedings of the 14th IEEE International Conference on High Performance Computing and Communications, HPCC-2012 - 9th IEEE International Conference on Embedded Software and Systems, ICESS-2012

SP - 1612

EP - 1617

BT - Proceedings of the 14th IEEE International Conference on High Performance Computing and Communications, HPCC-2012 - 9th IEEE International Conference on Embedded Software and Systems, ICESS-2012

T2 - 14th IEEE International Conference on High Performance Computing and Communications, HPCC-2012 - 9th IEEE International Conference on Embedded Software and Systems, ICESS-2012

Y2 - 25 June 2012 through 27 June 2012

ER -

Hung CL, Lin CY, Wang HH, Chang CY. Efficient packet pattern matching for gigabit network intrusion detection using GPUs. In Proceedings of the 14th IEEE International Conference on High Performance Computing and Communications, HPCC-2012 - 9th IEEE International Conference on Embedded Software and Systems, ICESS-2012. 2012. p. 1612-1617. 6332370. (Proceedings of the 14th IEEE International Conference on High Performance Computing and Communications, HPCC-2012 - 9th IEEE International Conference on Embedded Software and Systems, ICESS-2012). doi: 10.1109/HPCC.2012.235

Efficient packet pattern matching for gigabit network intrusion detection using GPUs

Abstract

Publication series

Conference

Keywords

Access to Document

Other files and links

Fingerprint

Cite this