Niccolo' Cascarano
Riccardo Sisto
Abstract
This paper presents iNFAnt, a parallel engine for regular expression pattern matching. In contrast with traditional approaches, iNFAnt adopts non-deterministic automata, allowing the compilation of very large and complex rule sets that are otherwise hard to treat. iNFAnt is explicitly designed and developed to run on graphical processing units that provide large amounts of concurrent threads; this parallelism is exploited to handle the non-determinism of the model and to process multiple packets at once, thus achieving high performance levels.
- M. Becchi and P. Crowley. A hybrid finite automaton for practical deep packet inspection. In proceedings of CoNEXT '07, pages 1--12, NY, USA, 2007. ACM. Google Scholar
Digital Library
- M. Becchi and P. Crowley. Efficient regular expression evaluation: theory to practice. In proceedings of ANCS'08, pages 50--59, NY, USA, 2008. ACM. Google ScholarDigital Library
- M. Becchi, C. Wiseman, and P. Crowley. Evaluating regular expression matching engines on network and general purpose processors. In proceedings of ANCS'09, NY, USA, 2009. ACM. Google ScholarDigital Library
- F. Kulishov. DFA-based and SIMD NFA-based regular expression matching on Cell BE for fast network traffic filtering. In proceedings of SIN '09, pages 123--127, NY, USA, 2009. ACM. Google ScholarDigital Library
- R. Smith, N. Goyal, J. Ormont, K. Sankaralingam, and C. Estan. Evaluating GPUs for network packet signature matching. In proceedings of ISPASS '09, pages 175--184, 2009.Google ScholarCross Ref
- G. Szabo, I. Godor, A. Veres, and S. Malomsoky, Sz. and. Molnar. Traffic classification over gbit speed with commodity hardware. In accepted for publication in IEEE Journal of Communications Software and Systems, 2010, Vol. 5, Num. 3., 2010.Google Scholar
- G. Vasiliadis, S. Antonatos, M. Polychronakis, E. P. Markatos, and S. Ioannidis. Gnort: High performance network intrusion detection using graphics processors. In proceedings of RAID '08, pages 116--134, Berlin, Heidelberg, 2008. Springer-Verlag. Google ScholarDigital Library
- G. Vasiliadis, M. Polychronakis, S. Antonatos, E. P. Markatos, and S. Ioannidis. Regular expression matching on graphics hardware for intrusion detection. In proceedings of RAID '09, pages 265--283, Berlin, Heidelberg, 2009. Springer-Verlag. Google ScholarDigital Library
Index Terms
- iNFAnt: NFA pattern matching on GPGPU devices
Recommendations
GPU-based NFA implementation for memory efficient high speed regular expression matching
PPoPP '12: Proceedings of the 17th ACM SIGPLAN symposium on Principles and Practice of Parallel ProgrammingRegular expression pattern matching is the foundation and core engine of many network functions, such as network intrusion detection, worm detection, traffic analysis, web applications and so on. DFA-based solutions suffer exponentially exploding state ...
GPU-based NFA implementation for memory efficient high speed regular expression matching
PPOPP '12Regular expression pattern matching is the foundation and core engine of many network functions, such as network intrusion detection, worm detection, traffic analysis, web applications and so on. DFA-based solutions suffer exponentially exploding state ...
A performance study of general-purpose applications on graphics processors using CUDA
Graphics processors (GPUs) provide a vast number of simple, data-parallel, deeply multithreaded cores and high memory bandwidths. GPU architectures are becoming increasingly programmable, offering the potential for dramatic speedups for a variety of ...
Comments