使用FPGA进行网络入侵监测

Efficient Packet Classification for Network Intrusion Detection using FPGA

FPGA技术已经被广泛用于实时网络入侵监测。一个称为BV-TCAM的数据包分类体系,它是用来实现以FPGA为基础的网络入侵监测系统(NIDS)。这个分类器每秒钟报出网络连接中的多个以比特单位的匹配,它结合了三重内容可设定地址的存储(TCAM)和比特向量算法(BV)。

FPGA technology has become widely used for real-time network intrusion detection. In this paper, a novel packet classification architecture called BV-TCAM is presented, which is implemented for an FPGA-based Network Intrusion Detection System （NIDS）. The classifier can report multiple matches at gigabit per second network link rates. The BVTCAM architecture combines the Ternary Content Addressable Memory （TCAM） and the Bit Vector （BV） algorithm to effectively compress the data representations and boost throughput.