TY - GEN
T1 - Length-bounded hybrid CPU/GPU pattern matching algorithm for deep packet inspection
AU - Lin, Yi Shan
AU - Lee, Chun Liang
AU - Chen, Yaw-Chung
PY - 2016/12/17
Y1 - 2016/12/17
N2 - Since frequent communication between the applications took place in high speed networks, deep packet inspection (DPI) plays an important role to the network application awareness. The signature-based network intrusion detection system (NIDS) contains the DPI technique that examines the incoming packet payloads by employing the pattern matching algorithm, which dominates the overall inspection performance. Existing studies focused on implementing efficient pattern matching algorithms by parallel programming on software platform because of the advantages of lower cost and higher scalability. Either the central processing unit (CPU) or the graphic processing unit (GPU) was involved. Our studies focused on designing a pattern matching algorithm based on the cooperation between both CPU and GPU. In this paper, we present an enhanced design for our previous work and introduce this novel method, a length-bounded hybrid CPU/GPU pattern matching algorithm (LHPMA). In the preliminary experiment, the performance and comparison with the previous work are displayed, and the results show that the LHPMA achieves higher throughput than other tested algorithms.
AB - Since frequent communication between the applications took place in high speed networks, deep packet inspection (DPI) plays an important role to the network application awareness. The signature-based network intrusion detection system (NIDS) contains the DPI technique that examines the incoming packet payloads by employing the pattern matching algorithm, which dominates the overall inspection performance. Existing studies focused on implementing efficient pattern matching algorithms by parallel programming on software platform because of the advantages of lower cost and higher scalability. Either the central processing unit (CPU) or the graphic processing unit (GPU) was involved. Our studies focused on designing a pattern matching algorithm based on the cooperation between both CPU and GPU. In this paper, we present an enhanced design for our previous work and introduce this novel method, a length-bounded hybrid CPU/GPU pattern matching algorithm (LHPMA). In the preliminary experiment, the performance and comparison with the previous work are displayed, and the results show that the LHPMA achieves higher throughput than other tested algorithms.
KW - Compute Unified Device Architecture (CUDA)
KW - Deep Packet Inspection (DPI)
KW - GeneralPurpose Graphics Processing Unit (GPGPU)
KW - Intrusion Detection System (IDS)
KW - Network Security
KW - Pattern Matching Algorithm
UR - http://www.scopus.com/inward/record.url?scp=85018323404&partnerID=8YFLogxK
U2 - 10.1145/3033288.3033346
DO - 10.1145/3033288.3033346
M3 - Conference contribution
AN - SCOPUS:85018323404
T3 - ACM International Conference Proceeding Series
SP - 63
EP - 67
BT - Proceedings of 2016 5th International Conference on Network, Communication and Computing, ICNCC 2016
PB - Association for Computing Machinery
Y2 - 17 December 2016 through 21 December 2016
ER -