Skip to main content
SpringerLink
Log in
Book cover

International Conference on Computational and Information Science

CIS 2005: Computational Intelligence and Security pp 220–227Cite as

A Multi-gigabit Virus Detection Algorithm Using Ternary CAM

  • Conference paper

  • 1207 Accesses

Part of the book series: Lecture Notes in Computer Science ((LNAI,volume 3802))

Abstract

During the last few years, the number of Internet worms and viruses has significantly increased. For the fast detection of Internet worms/viruses, the signature-based scheme with TCAM is necessary for the network intrusion detection system (NIDS). However, due to the limit of the TCAM size, all the signatures of Internet worms/viruses cannot be stored. Hence, we propose a two-phase content inspection algorithm which can support a large number of long signatures at TCAM. From the simulation results, it is shown that our algorithm for TCAM provides a fast virus-detection capability at line rate of 10Gbps (OC192).

This research was supported in part by ITRC program of the Ministry of Information and Communication, Korea.

This is a preview of subscription content, log in via an institution.

Chapter
USD   29.95
Price excludes VAT (USA)
  • Available as PDF
  • Read on any device
  • Instant download
  • Own it forever
eBook
USD   169.00
Price excludes VAT (USA)
  • Available as PDF
  • Read on any device
  • Instant download
  • Own it forever

Tax calculation will be finalised at checkout

Purchases are for personal use only

Learn about institutional subscriptions

Preview

Unable to display preview. Download preview PDF.

Unable to display preview. Download preview PDF.

References

  1. Snort, http://www.snort.org/

  2. Clam Antivirus, http://www.clamav.net/

  3. Liu, H.: Routing Table Compaction in Ternary CAM. IEEE Micro. (2002)

    Google Scholar 

  4. Ravikumar, V.C., Mahapatra, R.N.: TCAM Architecture for IP Lookup Using Prefix Properties. IEEE Micro. (2004)

    Google Scholar 

  5. IDT, Network Search Engine (NSE) with QDRTM Interface, http://www1.idt.com/pcms/tempDocs/75K6213452134_DS_80635.pdf

  6. Sung, J.S., Kang, S.M., Lee, Y.S., Kwon, T.G., Kim, B.T.: A Multi-gigabit Rate Deep Packet Inspection Algorithm using TCAM. IEEE Globecom (2005) (to appear)

    Google Scholar 

  7. Yu, F., Kats, R.H., Lakshman, T.V.: Gigabit Rate Packet Pattern-Matching Using TCAM. In: IEEE International Conference on Network Protocols (2004)

    Google Scholar 

  8. Naik, U.R., Chandra, P.R.: Designing High-Performance Networking Applications, p. 472. Intel Press (2004)

    Google Scholar 

Download references

Author information

Authors and Affiliations

  1. Dept. of Computer Engineering, Chungnam National University, 220 Gung-dong, Yuseong-gu, Deajeon, 305-764, Korea

    Il-Seop Song, Youngseok Lee & Taeck-Geun Kwon

Authors
  1. Il-Seop Song
    View author publications

    You can also search for this author in PubMed Google Scholar

  2. Youngseok Lee
    View author publications

    You can also search for this author in PubMed Google Scholar

  3. Taeck-Geun Kwon
    View author publications

    You can also search for this author in PubMed Google Scholar

Editor information

Editors and Affiliations

  1. Microelectronic Instiute, Xidian University, 710071, Xi’an, China

    Yue Hao

  2. Department of Computer Science, Hong Kong Baptist University, Kowloon Tong, Hong Kong

    Jiming Liu

  3. School of Computer Science and Technology, Xidian University, Xi’an, China

    Yu-Ping Wang

  4. Department of Computer Science, Hong Kong Baptist University, Hong Kong,  

    Yiu-ming Cheung

  5. School of Electrical and Electronic Engineering, University of Manchester, UK

    Hujun Yin

  6. Life Science Research Center, School of Electronic Engineering, Xidian University, 710071, Xi’an, Shaanxi, China

    Licheng Jiao

  7. Key Laboratory of Computer Networks and Information Security(Ministry of Education), Xidian University, 710071, Xi’an, China

    Jianfeng Ma

  8. National Laboratory of Antennas and Microwave Technology, Xidian University, 710071, Xi’an, Shanxi, P.R. China

    Yong-Chang Jiao

Rights and permissions

Reprints and permissions

Copyright information

© 2005 Springer-Verlag Berlin Heidelberg

About this paper

Cite this paper

Song, IS., Lee, Y., Kwon, TG. (2005). A Multi-gigabit Virus Detection Algorithm Using Ternary CAM. In: Hao, Y., et al. Computational Intelligence and Security. CIS 2005. Lecture Notes in Computer Science(), vol 3802. Springer, Berlin, Heidelberg. https://doi.org/10.1007/11596981_33

Download citation

  • DOI: https://doi.org/10.1007/11596981_33

  • Publisher Name: Springer, Berlin, Heidelberg

  • Print ISBN: 978-3-540-30819-5

  • Online ISBN: 978-3-540-31598-8

  • eBook Packages: Computer ScienceComputer Science (R0)

Publish with us

Policies and ethics

Search

Navigation