標題: A Scalable High-Performance Virus Detection Processor Against a Large Pattern Set for Embedded Network Security
作者: Cheng, Chieh-Jen
Wang, Chao-Ching
Ku, Wei-Chun
Chen, Tien-Fu
Wang, Jinn-Shyan
資訊工程學系
Department of Computer Science
關鍵字: Algorithmic attacks;embedded system;memory gap;network security;virus detection
公開日期: 1-五月-2012
摘要: Contemporary network security applications generally require the ability to perform powerful pattern matching to protect against attacks such as viruses and spam. Traditional hardware solutions are intended for firewall routers. However, the solutions in the literature for firewalls are not scalable, and they do not address the difficulty of an antivirus with an ever-larger pattern set. The goal of this work is to provide a systematic virus detection hardware solution for network security for embedded systems. Instead of placing entire matching patterns on a chip, our solution is a two-phase dictionary-based antivirus processor that works by condensing as much of the important filtering information as possible onto a chip and infrequently accessing off-chip data to make the matching mechanism scalable to large pattern sets. In the first stage, the filtering engine can filter out more than 93.1% of data as safe, using a merged shift table. Only 6.9% or less of potentially unsafe data must be precisely checked in the second stage by the exact-matching engine from off-chip memory. To reduce the impact of the memory gap, we also propose three enhancement algorithms to improve performance: 1) a skipping algorithm; 2) a cache method; and 3) a prefetching mechanism.
URI: http://hdl.handle.net/11536/16008
ISSN: 1063-8210
期刊: IEEE TRANSACTIONS ON VERY LARGE SCALE INTEGRATION (VLSI) SYSTEMS
Volume: 20
Issue: 5
結束頁: 841
顯示於類別:期刊論文


文件中的檔案:

  1. 000302640200006.pdf