Applying Cuckoo Hashing for FPGA-based pattern matching in NIDS/NIPS

Simple item page
dc.contributor.authorThinh, Tran Ngoc
dc.contributor.authorKittitornkun, Surin
dc.contributor.authorTomiyama, Shigenori
dc.date.accessioned2026-08-06T09:55:56Z
dc.date.available2026-08-06T09:55:56Z
dc.date.issued2007-12-01
dc.description.abstractPattern matching for network intrusion/prevention detection requires extremely high throughput with frequent updates to support new attack patterns. Most of current hardware implementations have outstanding performance over software implementations. However, the requirement for dynamic update pattern set is still challenging for hardware researchers. This paper describes a novel FPGA-based pattern matching architecture using a recent hashing algorithm called Cuckoo Hashing. The proposed architecture features on-the-fly pattern updates without reconfiguration, more efficient hardware utilization, and higher performance. Through various algorithmic changes of Cuckoo Hashing, we can implement parallel pattern matching on SRAM-based FPGA. Our system can accommodate the latest Snort rule-set, an open source Network Intrusion Detection/Prevention System, and achieve the highest utilization in terms of SRAM per character and Logic Cells per character at 17 bits/character and 0.043 Logic Cells/character, respectively on major Xilinx Virtex architectures. Compared to others, ours is much more efficient than any other Xilinx FPGA architectures. © 2007 IEEE.
dc.identifier.citationIcfpt 2007 International Conference on Field Programmable Technology, 121-128, 2007
dc.identifier.doi10.1109/FPT.2007.4439240
dc.identifier.other2-s2.0-50149092436
dc.identifier.urihttps://dspace.kmitl.ac.th/handle/123456789/1814
dc.sourceIcfpt 2007 International Conference on Field Programmable Technology
dc.titleApplying Cuckoo Hashing for FPGA-based pattern matching in NIDS/NIPS
dc.typeConference Paper

Files

Collections

Research