TCAM-Based Implementation of Memory Efficient Multipattern Matching for Network Intrusion Detection System

Provided by: Creative Commons
Topic: Storage
Format: PDF
Intrusion Detection Systems (IDSs) are designed to detect various hazardous contents and alert their existence in the networks. Multipattern matching is widely used in network intrusion detection systems. Multipattern matching problem can be solved using Aho-Corasick algorithm. Multipattern matching can be performed using NFA and DFA. Since NFA have lesser number of transitions than DFA, The Aho-Corasick NFA can be implemented on a TCAM with smaller number of entries than DFA. The merging of output states with same input in Aho-Corasick NFA is used.

Find By Topic