A Survey on Hardware Solutions for Signature-Based Security Systems

Serhii Hilgurt
2021 International Workshop on Information Technologies: Theoretical and Applied Problems  
Signature approach due to its exact matching is still a relevant technology used in applications like network intrusion detection systems (NIDS), antivirus, anti-spam, worm-containment and other security systems. Basing on signature approach, multi-pattern string matching technology by comparing an input data stream against a set of predefined patterns, detects malicious activities. Due to the increasing signature database size and the high throughput of today's networks the traditional
more » ... alone solutions can no longer meet the performance requirements of such systems. Therefore, many hardware approaches are proposed to accelerate the computational-intensive pattern matching procedure. On the other hand, a developer of hardware-accelerated security system has to solve non-trivial problem of choosing the most suitable approach in each particular case. Thus, some kind of guidance is needed to facilitate this problem solving. This paper provides a comprehensive survey on the hardware solutions were proposed in this area for the past years focusing on their effectiveness and feasibility. A deep analysis of main directions of security systems hardware acceleration has done. The most promising direction based on the use of FPGA and programmable logic is more closely investigated.
dblp:conf/ittap/Hilgurt21 fatcat:kkdhtsiukve6llvocu42p5j6ku