文章基本信息

标题：Packet Inspection on Programmable Hardware
本地全文：下载
作者：Benfano Soewito
期刊名称：Computer Engineering and Intelligent Systems
印刷版ISSN：2222-1727
电子版ISSN：2222-2863
出版年度：2013
卷号：4
期号：2
页码：57-68
语种：English
出版社：International Institute for Science, Technology Education
摘要：In the network security system, one of the issues that are being discussed is to conduct a quick inspection of all incoming and outgoing packet. In this paper, we make a design packet inspection systems using programmable hardware. We propose the packet inspection system using a Field Programmable Gate Array (FPGA). The system proposed consisting of two important parts. The first part is to scanning packet very fast and the second is for verifying the results of scanning the first part. On the first part, the system based on incoming packet contents, the packet can reduce the number of strings to be matched for each packet and, accordingly, feed the packet to a verifier in the second part to conduct accurate string matching. In this paper a novel multi-threading finite state machine is proposed, which improves the clock frequency and allows multiple packets to be examined by a single state machine simultaneously. Design techniques for high-speed interconnect and interface circuits are also presented. The results of our experiment show that the system performance depend on the string matching algorithm, design on FPGA, and the number of string to be matched.
关键词：Packet inspection; string matching; Field programmable gate array; Traffic classification