Article

Implementation of a Content-Scanning Module for an Internet Firewall

Authors:

James Moscola,

John Lockwood,

Ronald P. Loui,

Michael PachosAuthors Info & Claims

FCCM '03: Proceedings of the 11th Annual IEEE Symposium on Field-Programmable Custom Computing Machines

Page 31

Published: 09 April 2003 Publication History

Publisher Site

Abstract

A module has been implemented in Field Programmable Gate Array (FPGA) hardware that scansthe content of Internet packets at Gigabit/second rates.All of the packet processing operations are performedusing reconfigurable hardware within a single XilinxVirtex XCV2000E FPGA. A set of layered protocolwrappers is used to parse the headers and payloads ofpackets for Internet protocol data. A content matching server automatically generates the Finite State Machines (FSMs) to search for regular expressions. Thecomplete system is operated on the Field-programmablePort Extender (FPX) platform.

Cited By

View all

Liu ATorng ELiu ATorng E(2016)Overlay Automata and Algorithms for Fast and Scalable Regular Expression MatchingIEEE/ACM Transactions on Networking10.1109/TNET.2016.253360524:4(2400-2415)Online publication date: 1-Aug-2016
https://dl.acm.org/doi/10.1109/TNET.2016.2533605
Huang KDing LXie GZhang DLiu ASalamatian KNajjar WYavatkar RRixner S(2013)Scalable TCAM-based regular expression matching with compressed finite automataProceedings of the ninth ACM/IEEE symposium on Architectures for networking and communications systems10.5555/2537857.2537868(83-94)Online publication date: 21-Oct-2013
https://dl.acm.org/doi/10.5555/2537857.2537868
Karuppiah ARajaram S(2012)An enhanced architecture for pattern matching in FPGA for intrusion detection in wireless sensor networksInternational Journal of Mobile Network Design and Innovation10.1504/IJMNDI.2012.0519414:3(119-129)Online publication date: 1-Feb-2012
https://dl.acm.org/doi/10.1504/IJMNDI.2012.051941
Show More Cited By

Index Terms

Implementation of a Content-Scanning Module for an Internet Firewall
1. Computer systems organization
  1. Architectures
    1. Other architectures
      1. Reconfigurable computing
      2. Self-organizing autonomic computing
2. Hardware
  1. Very large scale integration design
    1. Application-specific VLSI designs
      1. Application specific processors

Recommendations

System level hardware module generation

In complex modern day electronic systems, far more time is spent in designing the boards, writing the software to drive and integrate the hardware, and other such system level issues, than is spent in designing any application-specific ICs that may be ...
A High Speed Reconfigurable Firewall Based On Parameterizable FPGA-based Content Addressable Memories

A technique for implementing a Content Addressable Memory (CAM) on an FPGA is described. The CAM is highly parameterizable, allowing varying word widths, memory depths and operations to be implemented depending upon the requirements of the target ...
Scalable ternary content addressable memory implementation using FPGAs
ANCS '13: Proceedings of the ninth ACM/IEEE symposium on Architectures for networking and communications systems

Ternary Content Addressable Memory (TCAM) is widely used in network infrastructure for various search functions. There has been a growing interest in implementing TCAM using reconfigurable hardware such as Field Programmable Gate Array (FPGA). Most of ...

Comments

Information & Contributors

Information

Published In

FCCM '03: Proceedings of the 11th Annual IEEE Symposium on Field-Programmable Custom Computing Machines

April 2003

ISBN:0769519792

Publisher

IEEE Computer Society

United States

Publication History

Published: 09 April 2003

Qualifiers

Article

Contributors

Other Metrics

View Article Metrics

Bibliometrics & Citations

Bibliometrics

Article Metrics

60
Total Citations
View Citations
0
Total Downloads

Downloads (Last 12 months)0
Downloads (Last 6 weeks)0

Reflects downloads up to 15 Oct 2024

Other Metrics

View Author Metrics

Citations

Cited By

View all

Liu ATorng ELiu ATorng E(2016)Overlay Automata and Algorithms for Fast and Scalable Regular Expression MatchingIEEE/ACM Transactions on Networking10.1109/TNET.2016.253360524:4(2400-2415)Online publication date: 1-Aug-2016
https://dl.acm.org/doi/10.1109/TNET.2016.2533605
Huang KDing LXie GZhang DLiu ASalamatian KNajjar WYavatkar RRixner S(2013)Scalable TCAM-based regular expression matching with compressed finite automataProceedings of the ninth ACM/IEEE symposium on Architectures for networking and communications systems10.5555/2537857.2537868(83-94)Online publication date: 21-Oct-2013
https://dl.acm.org/doi/10.5555/2537857.2537868
Karuppiah ARajaram S(2012)An enhanced architecture for pattern matching in FPGA for intrusion detection in wireless sensor networksInternational Journal of Mobile Network Design and Innovation10.1504/IJMNDI.2012.0519414:3(119-129)Online publication date: 1-Feb-2012
https://dl.acm.org/doi/10.1504/IJMNDI.2012.051941
Vasiliadis GPolychronakis MIoannidis SChen YDanezis GShmatikov V(2011)MIDeAProceedings of the 18th ACM conference on Computer and communications security10.1145/2046707.2046741(297-308)Online publication date: 17-Oct-2011
https://dl.acm.org/doi/10.1145/2046707.2046741
Lin CChang S(2011)Efficient pattern matching algorithm for memory architectureIEEE Transactions on Very Large Scale Integration (VLSI) Systems10.1109/TVLSI.2009.202834619:1(33-41)Online publication date: 1-Jan-2011
https://dl.acm.org/doi/10.1109/TVLSI.2009.2028346
Wen YTang XJu LChen T(2011)PeRexProceedings of the 2011 IEEE/ACM International Conference on Green Computing and Communications10.1109/GreenCom.2011.39(188-193)Online publication date: 4-Aug-2011
https://dl.acm.org/doi/10.1109/GreenCom.2011.39
Vasiliadis GIoannidis S(2010)GrAVityProceedings of the 13th international conference on Recent advances in intrusion detection10.5555/1894166.1894173(79-96)Online publication date: 15-Sep-2010
https://dl.acm.org/doi/10.5555/1894166.1894173
Wang HPu SKnezek GLiu JCheung PWawrzynek J(2010)A modular NFA architecture for regular expression matchingProceedings of the 18th annual ACM/SIGDA international symposium on Field programmable gate arrays10.1145/1723112.1723149(209-218)Online publication date: 21-Feb-2010
https://dl.acm.org/doi/10.1145/1723112.1723149
Cong MAn HCao LLiu YLi PWang TYu ZLiu D(2010)Pattern-unit based regular expression matching with reconfigurable function unitProceedings of the 2010 international conference on Computational Science and Its Applications - Volume Part IV10.1007/978-3-642-12189-0_38(427-440)Online publication date: 23-Mar-2010
https://dl.acm.org/doi/10.1007/978-3-642-12189-0_38
Hwang WRoan HShih YLo COu C(2009)FPGA-based ROM-free network intrusion detection using shift-OR circuitJournal of Embedded Computing10.5555/1551877.15518803:2(99-107)Online publication date: 1-Apr-2009
https://dl.acm.org/doi/10.5555/1551877.1551880
Show More Cited By

Abstract

Cited By

Index Terms

Recommendations

System level hardware module generation

A High Speed Reconfigurable Firewall Based On Parameterizable FPGA-based Content Addressable Memories

Scalable ternary content addressable memory implementation using FPGAs

Comments

Information

Published In

Publisher

Publication History

Qualifiers

Contributors

Other Metrics

Bibliometrics

Article Metrics

Other Metrics

Citations

Cited By

View options

Figures

Other

Share

Share this Publication link

Share on social media

Affiliations