Implementation results of bloom filters for string matching
ABSTRACT Network intrusion detection and prevention systems
(IDPS) use string matching to scan Internet packets for
malicious content. Bloom filters offer a mechanism to search for
a large number of strings efficiently and concurrently when
implemented with field programmable gate array (FPGA)
technology. A string matching circuit has been implemented
within the FPX platform using Bloom filters. Using 155 block
RAMs on a single Xilinx VirtexE 2000 FPGA, the circuit scans for
35,475 unique signatures. Mobile Information Systems. 01/2008;
4:33-49. IEEE Communications Surveys and Tutorials. 01/2011;
13:541-561. Article: Realizing a Sub-Linear Time String-Matching
Algorithm With a Hardware Accelerator Using Bloom Filters[show
abstract] [hide abstract] ABSTRACT: Many network security
applications rely on string matching to detect intrusions,
viruses, spam, and so on. Since software implementation may not
keep pace with the high-speed demand, turning to ha