Multibyte Regular Expression Matching with Speculation

Multibyte Regular Expression Matching with Speculation,10.1007/978-3-642-04342-0_15,Daniel Luchaup,Randy Smith,Cristian Estan,Somesh Jha

Multibyte Regular Expression Matching with Speculation   (Citations: 5)
BibTex | RIS | RefWorks Download
Intrusion prevention systems determine whether incoming traffic matches a database of signatures, where each signature in the database represents an attack or a vulnerability. IPSs need to keep up with ever-increasing line speeds, which leads to the use of custom hardware. A major bottleneck that IPSs face is that they scan incoming packets one byte at a time, which limits their throughput and latency. In this paper, we present a method for scanning multiple bytes in parallel using speculation. We break the packet in several chunks, opportunistically scan them in parallel and if the speculation is wrong, correct it later. We present algorithms that apply speculation in single-threaded software running on commodity processors as well as algorithms for parallel hardware. Experimental results show that speculation leads to improvements in latency and throughput in both cases.
Conference: Recent Advances in Intrusion Detection - RAID , pp. 284-303, 2009
Cumulative Annual
View Publication
The following links allow you to view full publications. These links are maintained by other sources not affiliated with Microsoft Academic Search.
Sort by: