پديد آورنده :
حاجي آبادي، محمدحسين
عنوان :
رهيافت سخت افزاري حل مسئله ي تطبيق رشته در سرعت هاي بالا با استفاده از يك الگوريتم جديد
مقطع تحصيلي :
كارشناسي ارشد
محل تحصيل :
اصفهان: دانشگاه صنعتي اصفهان، دانشكده برق و كامپيوتر
صفحه شمار :
دوازده،101ص.: مصور،جدول
يادداشت :
ص.ع.به فارسي و انگليسي
استاد راهنما :
حسين سعيدي
استاد مشاور :
محمد بهدادفر
توصيفگر ها :
سيستم تشخيص نفوذ , تطبيق الگو , FPGA
تاريخ نمايه سازي :
7/8/93
دانشكده :
مهندسي برق و كامپيوتر
چكيده انگليسي :
A Hardware based and high throughput string matching approach using novel algorithm Mohammad Hossein Hajiabadi m hajiabadi@ec iut ac ir Date of Submission 2013 05 9 Department of Electrical and Computer Engineering Isfahan University of Technology Isfahan 84156 83111 Iran Degree M Sc Language FarsiSupervisor Hossein Saidi hsaidi@cc iut ac irAbstractString matching is the primary function of signature based intrusion detection systems We propose a novelalgorithm for string matching inspired by old fashion searching in a general dictionary in which the wordsof this dictionary is consists of ASCII characters We also present a scalable high throughput memoryefficient and modular architecture for large scale string matching based on the proposed algorithm Thewords of interested dictionary have been extracted from malicious patterns at Snort NIDS 2013 database The memory efficiency of the proposed algorithms is directly proportional to the dissimilarity of patterns atthe first characters In a large dictionary it is feasible to create several groups when members of eachgroup satisfy a desired condition The presented architecture is designed for implementation on the FieldProgrammable Gate Array and profits from the pipeline modular structure and suitable utilization ofdistributed memory resources Due to the routing limitation of FPGAs the maximum length of patterns hasbeen bounded and a further solution suggested for tackling this obstacle The post place routeimplementation results of a set of 11895 patterns 117832 Byte with lengths within 2 and 20 charactersshow an efficiency of 1 47 Byte Char or 0 28 for 6 input LUT char and a maximum throughput of2 38Gbps Other results for a set of 3471 patterns 104399 Byte with lengths within 21 and 40 charactersshow an efficiency of 1 87Byte Char or 0 42 for6 input LUT char and the maximum throughput of1 97Gbps Adding new string to dictionary is feasible by placing extra modules in architecture Keywords String matching intrusion detection system Field programmable gate array modular hardware based
استاد راهنما :
حسين سعيدي
استاد مشاور :
محمد بهدادفر
