BROWSE
Detail
Conference Paper
A Multi-gigabit Rate Deep Packet Inspection Algorithm using TCAM
Cited 27 time in 
Share 
Share
- Authors
- Jung-Sik Sung, Seok-Min Kang, Youngseok Lee, Taeck-Geun Kwon, Bong-Tae Kim
- Issue Date
- 2005-11
- Citation
- GLOBECOM 2005, pp.453-457
- Language
- English
- Type
- Conference Paper
- Abstract
- With the increasing importance of network protection from cyber threats, it is requested to develop a multi-gigabit rate pattern-matching method for protecting against malicious attacks in high-speed network. This paper devises a high-speed deep packet inspection algorithm with TCAM by using an m-byte jumping window pattern-matching scheme. The proposed algorithm significantly reduces the number of TCAM lookups per payload by m times with the marginally enlarged TCAM size which can be implemented by cascading multiple TCAMs. Due to the reduced number of TCAM lookups, we can easily achieve multi-gigabit rate for scanning the packet payload. It is shown by simulation that for the Snort rule with 2,247 patterns, our proposed algorithm supports more than 10 Gbps rate with a 9 Mbit TCAM. © 2005 IEEE.
- KSP Keywords
- Cyber threats, High speed network, Multi-Gigabit, Network protection, Packet payload, deep packet inspection(DPI), malicious attacks, matching method, pattern matching