research-article

Length-bounded Hybrid CPU/GPU Pattern Matching Algorithm for Deep Packet Inspection

Authors:

Chun-Liang Lee,

Yaw-Chung ChenAuthors Info & Claims

ICNCC '16: Proceedings of the Fifth International Conference on Network, Communication and Computing

Pages 63 - 67

https://doi.org/10.1145/3033288.3033346

Published: 17 December 2016 Publication History

Abstract

Since frequent communication between the applications took place in high speed networks, deep packet inspection (DPI) plays an important role to the network application awareness. The signature-based network intrusion detection system (NIDS) contains the DPI technique that examines the incoming packet payloads by employing the pattern matching algorithm, which dominates the overall inspection performance. Existing studies focused on implementing efficient pattern matching algorithms by parallel programming on software platform because of the advantages of lower cost and higher scalability. Either the central processing unit (CPU) or the graphic processing unit (GPU) was involved. Our studies focused on designing a pattern matching algorithm based on the cooperation between both CPU and GPU. In this paper, we present an enhanced design for our previous work and introduce this novel method, a length-bounded hybrid CPU/GPU pattern matching algorithm (LHPMA). In the preliminary experiment, the performance and comparison with the previous work are displayed, and the results show that the LHPMA achieves higher throughput than other tested algorithms.

References

[1]

Paxson, V. 1999. Bro: a system for detecting network intruders in real-time. Comput. Netw. 31, 23, 2435--2463.

Digital Library

[2]

Cabrera, J. B., Gosar, J., Lee, W., and Mehra, R. K. 2004. On the statistical distribution of processing times in network intrusion detection. In Proc. of IEEE Conf Decis Control. IEEE CDC. 1, 75--80.

[3]

Vallentin, M., Sommer, R., Lee, Lee, J., Leres, C., Paxson, V., and Tierney, B. 2007. The NIDS cluster: scalable, stateful network intrusion detection on commodity hardware. Int. Symp. on Recent Advances in Intrusion Detection. RAID'07. 107--126.

Digital Library

[4]

General-Purpose Computation Using Graphics Hardware (GPGPU). 2016. GPGPU.org. http://www.gpgpu.org.

[5]

Lee, C. L., Lin, Y. S., and Chen, Y. C. 2015. A hybrid CPU/GPU pattern matching algorithm for deep packet inspection. PLoS ONE. 10, 10, e0139301. http://journals.plos. org/plosone/article?id=10.1371/journal.pone.0139301.

[6]

Knuth, D. E., Morris, J., and Pratt, V. 1977. Fast pattern matching in strings. SIAM. J. Comput. 6, 2, 127--146.

[7]

Boyer, R. S., and Moore, J. S. 1977. A fast string searching algorithm. Commun. ACM. 20, 10, 762--772.

Digital Library

[8]

Aho, A.V., and Corasick, M. J. 1975. Efficient string matching: an aid to bibliographic search. Commun. ACM. 18, 6, 333--340.

Digital Library

[9]

Wu, S., and Manber, U. 1994. A fast algorithm for multi-pattern searching. Tucson (AZ): University of Arizona, Department of Computer Science, TR No. 9417.

[10]

Jacob, N., and Brodley, C. 2006. Offloading IDS computation to the GPU. In Proc. of Computer Security Applications Conference. ACSAC'06. 371--380.

Digital Library

[11]

Cisco Systems. 2016. Snort.org. http://www.snort.org.

[12]

Vasiliadis, G., Antonatos, S., Polychronakis, M., Markatos, E. P., and Iasnnidis, S. 2008. Gnort: high performance network intrusion detection using graphics processors. Int. Symp. on Recent Advances in Intrusion Detection. RAID'08. 116--134.

Digital Library

[13]

Han, S., Jang, K., Park, K., and Moon, S. 2011. PacketShader: a GPU-accelerated software router. ACM SIGCOMM Comput. Commun. Rev. 40, 4, 195--206.

Digital Library

[14]

Lin, Y. S., Lee, C. L., and Chen, Y. C. 2016. A capability-based hybrid CPU/GPU pattern matching algorithm for deep packet inspection. Int. J. of Computer and Communication Engineering. IJCCE. 5, 5, 321--330.

[15]

Douligeris, C., and Serpanos, D. N. 2007. Network security: current status and future directions. John Wiley & Sons.

Digital Library

[16]

OpenMP ARB. 2016. OpenMP. http://openmp.org.

[17]

Nvidia Corporation. 2015. NVIDIA CUDA C Programming Guide. http://docs.nvidia.com/cuda/pdf/CUDA_C_Programm ing_Guide.pdf.

Cited By

Çelebi MYavanoğlu U(2023)Accelerating Pattern Matching Using a Novel Multi-Pattern-Matching Algorithm on GPUApplied Sciences10.3390/app1314810413:14(8104)Online publication date: 11-Jul-2023
https://doi.org/10.3390/app13148104
Dominguez ACarballo PNunez A(2017)Programmable SoC platform for deep packet inspection using enhanced Boyer-Moore algorithm2017 12th International Symposium on Reconfigurable Communication-centric Systems-on-Chip (ReCoSoC)10.1109/ReCoSoC.2017.8016159(1-8)Online publication date: Jul-2017
https://doi.org/10.1109/ReCoSoC.2017.8016159

Recommendations

CPU/GPU Heterogeneous Parallel CFD Solver and Optimizations
ICSRT '18: Proceedings of the 2018 International Conference on Service Robotics Technologies

Graphics Processing Units (GPU) has been widely used in the area of general computing. Nowadays, CFD has dramatically benefited from the strong abilities of floating-point operation and memory bandwidth of GPU architecture. Lots of GPU-based CFD solvers ...
Parallel GPU architecture framework for the WRF Single Moment 6-class microphysics scheme

An Earth-observing remote sensing instrument is used to collect information about the physical environment within its instantaneous-field-of-view and is often placed aboard a suborbital or satellite platform for maximal spatial coverage. Remote sensing ...
Boosting CUDA Applications with CPU---GPU Hybrid Computing

This paper presents a cooperative heterogeneous computing framework which enables the efficient utilization of available computing resources of host CPU cores for CUDA kernels, which are designed to run only on GPU. The proposed system exploits at ...

Comments

Information & Contributors

Information

Published In

cover image ACM Other conferences

ICNCC '16: Proceedings of the Fifth International Conference on Network, Communication and Computing

December 2016

343 pages

ISBN:9781450347938

DOI:10.1145/3033288

Copyright © 2016 ACM.

Permission to make digital or hard copies of all or part of this work for personal or classroom use is granted without fee provided that copies are not made or distributed for profit or commercial advantage and that copies bear this notice and the full citation on the first page. Copyrights for components of this work owned by others than ACM must be honored. Abstracting with credit is permitted. To copy otherwise, or republish, to post on servers or to redistribute to lists, requires prior specific permission and/or a fee. Request permissions from [email protected]

Publisher

Association for Computing Machinery

New York, NY, United States

Publication History

Published: 17 December 2016

Permissions

Request permissions for this article.

Request Permissions

Check for updates

Author Tags

Qualifiers

Research-article
Research
Refereed limited

Conference

ICNCC '16

ICNCC '16: Fifth International Conference on Network, Communication and Computing

December 17 - 21, 2016

Kyoto, Japan

Contributors

Other Metrics

View Article Metrics

Bibliometrics & Citations

Bibliometrics

Article Metrics

2
Total Citations
View Citations
48
Total Downloads

Downloads (Last 12 months)2
Downloads (Last 6 weeks)1

Reflects downloads up to 27 Jul 2024

Other Metrics

View Author Metrics

Citations

Cited By

Çelebi MYavanoğlu U(2023)Accelerating Pattern Matching Using a Novel Multi-Pattern-Matching Algorithm on GPUApplied Sciences10.3390/app1314810413:14(8104)Online publication date: 11-Jul-2023
https://doi.org/10.3390/app13148104
Dominguez ACarballo PNunez A(2017)Programmable SoC platform for deep packet inspection using enhanced Boyer-Moore algorithm2017 12th International Symposium on Reconfigurable Communication-centric Systems-on-Chip (ReCoSoC)10.1109/ReCoSoC.2017.8016159(1-8)Online publication date: Jul-2017
https://doi.org/10.1109/ReCoSoC.2017.8016159

View Options

Get Access

Login options

Check if you have access through your login credentials or your institution to get full access on this article.

Full Access

Get this Publication

View options

PDF

View or Download as a PDF file.

eReader

View online with eReader.

Media

Figures

Other

Tables

View Table of Contents