期刊文献+
任意字段
题名或关键词
题名
关键词
文摘
作者
第一作者
机构
刊名
分类号
参考文献
作者简介
基金资助
栏目信息

一种基于CPU-GPU协同的特征码匹配机制

A Signature Matching Mechanism Based on the Cooperation of CPU and GPU
在线阅读 下载PDF
导出
摘要 在网络安全系统中,提出了一种基于CPU-GPU协同的特征码匹配机制。先用每个特征码表达式的n前缀,构建一个小的DFA(有限自动机);再在GPU上进行不完全匹配,剔除大量正常数据包,检测出可疑的数据包;然后再在CPU上对可疑数据包进行精确匹配。测试结果表明,该机制的匹配吞吐量能达到了19 Gbits/s。 In network security system,a signature matching mechanism based on the cooperation of CPU and GPU is proposed.Firstly,a small DFA（deterministic finite automaton） is constructed by using the first n prefix of each rule expression.Secondly,the non-exact matching is done on the GPU to pick out the dubious packets.Lastly,the exact matching is done by CPU.Experimental results show that the matching throughput reaches 19 Gbits/s.
作者 杨科 谷建华 张春永
机构地区 西北工业大学高性能计算中心
出处 《科学技术与工程》 北大核心 2012年第5期1056-1060,共5页 Science Technology and Engineering
基金 西北工业大学研究生创业种子基金(Z2011123) 国家"863"计划基金(2009AA01Z142)资助
关键词 正则表达式 特征码匹配 GPU 有限自动机 regular expression signature matching GPU DFA
分类号 TP393.08 [自动化与计算机技术—计算机应用技术]
  • 相关文献

参考文献10

  • 1张锦雄,梁正友,蔡德霞,韦兴柳.基于GPU实现允许k-差别近似串匹配并行算法[J].广西大学学报（自然科学版）,2011,36(2):285-291. 被引量：3
  • 2Mitra A,Najjar W,Bhuyan L.Compiling PCRE to FPGA for accelera-ting SNORT IDS.In Proceeding of the 3rd ACM/IEEE Symposium onArchitecture for Networking and Communications Systems,ANCS,2007.
  • 3Huang N F,Hung H W,Lai S H,et al.A GPU-based multiple-pat-tern matching algorithm for network intrusion detection systems.InProceedings of the 22nd International Conference on Advanced Infor-mation Networking and Applications Workshops,AINAW,2008.
  • 4Smith R,Goyal N,Ormont J,et al.Evaluating GPUs for networkpacket signature matching.Proc of International Symposium on Per-formance Analysis of Systems and Software,2009.
  • 5Vasiliadis G,Antonaton S,Polychronakis M,et al.Gnort:high per-formance network intrusion detection using graphics processors.Procof the 11th International Symposium on Recent Advances in IntrusionDetection.Berlin,Heidelberg:Springer-Verlag,2008:116-134.
  • 6Tumeo A,Secchi S,Villa O.Experiences with string matching on theFermi architecture.In Proceeding of the 24th International Conferenceon Architecture of Computing Systems,ARCS,2011.
  • 7Wu Chenkun,Yin Jianping,Cai Zhiping,et al.A hybrid parallel sig-nature matching model for network security applications using SIMDGPU.Proc of the 8th International Symposium on Advanced ParallelProcessing Techologies.Berlin,Heidelberg:Springer-Verlag,2009:191-204.
  • 8王磊,陈曙晖,苏金树,许孟晋.深度报文检测中基于GPU的正则表达式匹配引擎[J].计算机应用研究,2010,27(11):4324-4327. 被引量：10
  • 9NVIDIA.CUDA Programming Guide.http://developer.download.nvidia.com/compute/DevZone/docs/html/C/doc/CUDA_C_Pro-gramming_Guide.pdf.
  • 10Thompson K.Programming techniques:Regular expression searchalgorithm.Communications of the ACM,1968;11(6):419-422.

二级参考文献33

  • 1钟诚,范大娟.异构机群系统上基于多轮分配方式的近似串匹配并行算法[J].计算机研究与发展,2008,45(z1):105-112. 被引量：3
  • 2张庆丹,戴正华,冯圣中,孙凝晖.基于GPU的串匹配算法研究[J].计算机应用,2006,26(7):1735-1737. 被引量：15
  • 3Regular expression processor [ EB/OL ]. http ://www. titanicsystems. com/pdf/products/1. pdf.
  • 4BRODIE B C, TAYLOR D E, CYTRON R K. A scalable architecture for high-throughput regular-expression pattern matching [ J ]. SIGARCH Comput Archit News ,2006,34 ( 2 ) : 191 - 202.
  • 5SIDHU R, PRASANNA V K. Fast regular expression matching using FPGAs[ C ]//Proc of the 9th Annual IEEE Symposium on FCCM. Washington DC : IEEE Computer Society,2001:227- 238.
  • 6YU Fang, KATZ R H, LAKSHMAN T V. Gigabit rate packet pattern-matching using TCAM [ C ]//Proc of the 12th IEEE International Conference on Network Protocols. Washington DC : IEEE Computer Society,2004 : 174 - 183.
  • 7YU Jian-ming, LI Jun. A parallel NIDS pattern matching engine and its implementation on network processor [ C ]//Proc of International Conference on Security and Management. Las Vegas: CSREA Press, 2005:375-381.
  • 8LIU R Tong-tai, HUANG Nen-fu, KAO C N, et al. A fast patternmatch engine for network processor-based network intrusion detection system [ C ]//Proc of International Conference on Information Technology: Coding and Computing. Washington DC:IEEE Computer Society,2004:97-101.
  • 9CUDA programming guide [ EB/OL]. http://www, serc. iisc. ernet. in/ComputingFacilities/systems/Tesla _ Doc/NVIDIA _ CUDA _ Programming_Guide_2.3.pdf.
  • 10SMITH R, GOYAL N, ORMONTT J, et al. Evaluating GPUs for network packet signature matching[ C ]//Proc of International Symposium on Performance Analysis of Systems and Software. 2009.

共引文献11

科学技术与工程
2012年 第5期

相关作者

内容加载中请稍等...

相关机构

内容加载中请稍等...

相关主题

内容加载中请稍等...

浏览历史

内容加载中请稍等...
;
使用帮助 返回顶部