[go: up one dir, main page]

Faezipour et al., 2006 - Google Patents

CAM01-1: A customized TCAM architecture for multi-match packet classification

Faezipour et al., 2006

View PDF
Document ID
13124325131814048183
Author
Faezipour M
Nourani M
Publication year
Publication venue
IEEE Globecom 2006

External Links

Snippet

Most conventional packet classifiers find the highest priority filter that matches the packet. However, new networking applications such as network intrusion detection systems (NIDS) and load balancers require all (or the first few) matching results in packet classification. A …
Continue reading at www.researchgate.net (PDF) (other versions)

Classifications

    • G—PHYSICS
    • G06—COMPUTING; CALCULATING; COUNTING
    • G06F—ELECTRICAL DIGITAL DATA PROCESSING
    • G06F17/00—Digital computing or data processing equipment or methods, specially adapted for specific functions
    • G06F17/30—Information retrieval; Database structures therefor; File system structures therefor
    • G06F17/30943—Information retrieval; Database structures therefor; File system structures therefor details of database functions independent of the retrieved data type
    • G06F17/30964—Querying
    • G06F17/30979—Query processing
    • G06F17/30985—Query processing by using string matching techniques
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING; COUNTING
    • G06F—ELECTRICAL DIGITAL DATA PROCESSING
    • G06F17/00—Digital computing or data processing equipment or methods, specially adapted for specific functions
    • G06F17/30—Information retrieval; Database structures therefor; File system structures therefor
    • G06F17/30943—Information retrieval; Database structures therefor; File system structures therefor details of database functions independent of the retrieved data type
    • G06F17/30946—Information retrieval; Database structures therefor; File system structures therefor details of database functions independent of the retrieved data type indexing structures
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L45/00—Routing or path finding of packets in data switching networks
    • H04L45/74—Address processing for routing
    • H04L45/745—Address table lookup or address filtering
    • H04L45/7453—Address table lookup or address filtering using hashing
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING; COUNTING
    • G06F—ELECTRICAL DIGITAL DATA PROCESSING
    • G06F17/00—Digital computing or data processing equipment or methods, specially adapted for specific functions
    • G06F17/30—Information retrieval; Database structures therefor; File system structures therefor
    • G06F17/3061—Information retrieval; Database structures therefor; File system structures therefor of unstructured textual data
    • G06F17/30613—Indexing
    • G06F17/30619—Indexing indexing structures
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/14—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
    • H04L63/1408—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic by monitoring network traffic
    • H04L63/1416—Event detection, e.g. attack signature detection
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING; COUNTING
    • G06F—ELECTRICAL DIGITAL DATA PROCESSING
    • G06F7/00—Methods or arrangements for processing data by operating upon the order or content of the data handled
    • G06F7/02—Comparing digital values
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L45/00—Routing or path finding of packets in data switching networks
    • H04L45/74—Address processing for routing
    • H04L45/742—Route cache and its operation
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING; COUNTING
    • G06F—ELECTRICAL DIGITAL DATA PROCESSING
    • G06F7/00—Methods or arrangements for processing data by operating upon the order or content of the data handled
    • G06F7/22—Arrangements for sorting or merging computer data on continuous record carriers, e.g. tape, drum, disc
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING; COUNTING
    • G06F—ELECTRICAL DIGITAL DATA PROCESSING
    • G06F2207/00—Indexing scheme relating to methods or arrangements for processing data by operating upon the order or content of the data handled
    • G06F2207/02—Indexing scheme relating to groups G06F7/02 - G06F7/026
    • G06F2207/025—String search, i.e. pattern matching, e.g. find identical word or best match in a string
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING; COUNTING
    • G06F—ELECTRICAL DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/50—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems

Similar Documents

Publication Publication Date Title
Jiang et al. Large-scale wire-speed packet classification on FPGAs
Yu et al. Gigabit rate packet pattern-matching using TCAM
Faezipour et al. Wire-speed TCAM-based architectures for multimatch packet classification
Lakshminarayanan et al. Algorithms for advanced packet classification with ternary CAMs
US8051085B1 (en) Determining regular expression match lengths
US8212695B2 (en) Generating a log-log hash-based hierarchical data structure associated with a plurality of known arbitrary-length bit strings used for detecting whether an arbitrary-length bit string input matches one of a plurality of known arbitrary-length bit strings
Pao et al. A memory-efficient pipelined implementation of the aho-corasick string-matching algorithm
WO2008073824A1 (en) Dynamic programmable intelligent search memory
US7366830B1 (en) Row expansion reduction by inversion for range representation in ternary content addressable memories
US6987683B2 (en) Magnitude comparator based content addressable memory for search and sorting
US8370274B2 (en) Apparatuses and methods for deterministic pattern matching
Bremler-Barr et al. CompactDFA: Generic state machine compression for scalable pattern matching
US20060193159A1 (en) Fast pattern matching using large compressed databases
Cheng et al. Scalable multi-match packet classification using TCAM and SRAM
Puš et al. Fast and scalable packet classification using perfect hash functions
Lim et al. Tuple pruning using bloom filters for packet classification
US20130268729A1 (en) Scalable packet classification using associative memory
US8122189B1 (en) Methods for logically combining range representation values in a content addressable memory
Faezipour et al. CAM01-1: A customized TCAM architecture for multi-match packet classification
Hilgurt A Concise Review of FPGA-Based Hardware Solutions for Network Intrusion Detection
Nourani et al. A single-cycle multi-match packet classification engine using tcams
Rathod et al. A survey on Finite Automata based pattern matching techniques for network Intrusion Detection System (NIDS)
Lee et al. Hybrid memory-efficient multimatch packet classification for NIDS
Li et al. Deterministic and efficient hash table lookup using discriminated vectors
Lin et al. Fast tcam-based multi-match packet classification using discriminators