File Download

There are no files associated with this item.

  Links for fulltext
     (May Require Subscription)
Supplementary

Article: Memristor TCAMs Accelerate Regular Expression Matching for Network Intrusion Detection

TitleMemristor TCAMs Accelerate Regular Expression Matching for Network Intrusion Detection
Authors
Keywordsregular expression matching
network security
Memristor
finite automata
TCAM
resistive RAM
Issue Date2019
Citation
IEEE Transactions on Nanotechnology, 2019, v. 18, p. 963-970 How to Cite?
Abstract© 2002-2012 IEEE. We propose memristor-based TCAMs (Ternary Content Addressable Memory) circuits to accelerate Regular Expression (RegEx) matching through in memory processing of finite automata. RegEx matching is a key function in network security to find malicious actors. However, RegEx matching latency and power can be incredibly high and current proposals are challenged to perform wire-speed matching for large rulesets. Our approach dramatically decreases operating power, enables high throughput, and the use of nanoscale memristor TCAM circuits (mTCAMs) enables compression techniques to expand rulesets. We fabricated and demonstrated nanoscale memristor TCAM cells. SPICE simulations investigate performance at scale and a mTCAM dynamic power model using 16 nm layout parameters demonstrates \sim0.2 fJ/bit/search energy for a 36 × 250 mTCAM array. A tiled architecture is proposed to implement a Snort ruleset and assess application performance. Compared to a state-of-The-Art FPGA approach (2 Gbps, \sim1 W), we show \times 4 throughput (8 Gbps) at 55\% the power (0.55 W) without standard TCAM power-saving techniques. Our performance comparison improves further when striding (searching multiple characters at once) is considered, resulting in 47.2 Gbps at 1.2 W for our approach compared to 3.9 Gbps at 630 mW for strided FPGA NFA, demonstrating a promising path to wire-speed RegEx matching on large scale rulesets.
Persistent Identifierhttp://hdl.handle.net/10722/287002
ISSN
2023 Impact Factor: 2.1
2023 SCImago Journal Rankings: 0.435
ISI Accession Number ID

 

DC FieldValueLanguage
dc.contributor.authorGraves, Catherine E.-
dc.contributor.authorLi, Can-
dc.contributor.authorSheng, Xia-
dc.contributor.authorMa, Wen-
dc.contributor.authorChalamalasetti, Sai Rahul-
dc.contributor.authorMiller, Darrin-
dc.contributor.authorIgnowski, James S.-
dc.contributor.authorBuchanan, Brent-
dc.contributor.authorZheng, Le-
dc.contributor.authorLam, Si Ty-
dc.contributor.authorLi, Xuema-
dc.contributor.authorKiyama, Lennie-
dc.contributor.authorFoltin, Martin-
dc.contributor.authorHardy, Matthew P.-
dc.contributor.authorStrachan, John Paul-
dc.date.accessioned2020-09-07T11:46:14Z-
dc.date.available2020-09-07T11:46:14Z-
dc.date.issued2019-
dc.identifier.citationIEEE Transactions on Nanotechnology, 2019, v. 18, p. 963-970-
dc.identifier.issn1536-125X-
dc.identifier.urihttp://hdl.handle.net/10722/287002-
dc.description.abstract© 2002-2012 IEEE. We propose memristor-based TCAMs (Ternary Content Addressable Memory) circuits to accelerate Regular Expression (RegEx) matching through in memory processing of finite automata. RegEx matching is a key function in network security to find malicious actors. However, RegEx matching latency and power can be incredibly high and current proposals are challenged to perform wire-speed matching for large rulesets. Our approach dramatically decreases operating power, enables high throughput, and the use of nanoscale memristor TCAM circuits (mTCAMs) enables compression techniques to expand rulesets. We fabricated and demonstrated nanoscale memristor TCAM cells. SPICE simulations investigate performance at scale and a mTCAM dynamic power model using 16 nm layout parameters demonstrates \sim0.2 fJ/bit/search energy for a 36 × 250 mTCAM array. A tiled architecture is proposed to implement a Snort ruleset and assess application performance. Compared to a state-of-The-Art FPGA approach (2 Gbps, \sim1 W), we show \times 4 throughput (8 Gbps) at 55\% the power (0.55 W) without standard TCAM power-saving techniques. Our performance comparison improves further when striding (searching multiple characters at once) is considered, resulting in 47.2 Gbps at 1.2 W for our approach compared to 3.9 Gbps at 630 mW for strided FPGA NFA, demonstrating a promising path to wire-speed RegEx matching on large scale rulesets.-
dc.languageeng-
dc.relation.ispartofIEEE Transactions on Nanotechnology-
dc.subjectregular expression matching-
dc.subjectnetwork security-
dc.subjectMemristor-
dc.subjectfinite automata-
dc.subjectTCAM-
dc.subjectresistive RAM-
dc.titleMemristor TCAMs Accelerate Regular Expression Matching for Network Intrusion Detection-
dc.typeArticle-
dc.description.naturelink_to_subscribed_fulltext-
dc.identifier.doi10.1109/TNANO.2019.2936239-
dc.identifier.scopuseid_2-s2.0-85072964294-
dc.identifier.volume18-
dc.identifier.spage963-
dc.identifier.epage970-
dc.identifier.eissn1941-0085-
dc.identifier.isiWOS:000492159400001-
dc.identifier.issnl1536-125X-

Export via OAI-PMH Interface in XML Formats


OR


Export to Other Non-XML Formats