String matching is a critical element of modern intrusion detection systems because it lets a system make decisions based not just on headers, but actual content flowing through the network. Through careful codesign and optimization of an architecture with a new string matching algorithm, the authors show it is possible to build a system that is almost 12 times more efficient than the currently best known approaches.
Index Terms:
Bit-split string, intrusion detection, string matching
Citation:
Lin Tan, Timothy Sherwood, "Architectures for Bit-Split String Scanning in Intrusion Detection," IEEE Micro, vol. 26, no. 1, pp. 110-117, Jan./Feb. 2006, doi:10.1109/MM.2006.5