FSM Circuits Design for Approximate String Matching in Hardware Based Network Intrusion Detection Systems

In this paper, the authors present a logical circuits design for approximate content matching implemented as Finite State Machines (FSM). As network speed increases the software based Network Intrusion Detection and Prevention Systems (NIDPS) are lagging behind requirements in throughput of so called deep package inspection - the most exhaustive process of finding a pattern in package payloads. Therefore, there is a demand for hardware implementation. Approximate content matching is a special case of content finding and variations detection used by \"Evasion\" techniques. In this research they will enhance the k-differentiate problem with \"Ability\" to detect a generalized Levensthein edit distance i.e. transposition of two neighboring characters.

Provided by: mecs-press Topic: Security Date Added: Dec 2013 Format: PDF

Download Now

Find By Topic