Volume 5 Number 5 (Sep. 2016)
Home > Archive > 2016 > Volume 5 Number 5 (Sep. 2016) >
IJCCE 2016 Vol.5(5): 321-330 ISSN: 2010-3743
DOI: 10.17706/IJCCE.2016.5.5.321-330

A Capability-Based Hybrid CPU/GPU Pattern Matching Algorithm for Deep Packet Inspection

Yi-Shan Lin, Chun-Liang Lee, Yaw-Chung Chen
Abstract—Network applications have been developed quickly during recent years, and communications between these applications involve a large quantity of data transfer through high speed networks. Deep packet inspection (DPI) becomes indispensable to ensure network application-aware security. One of the DPI services is the signature-based network intrusion detection system (NIDS), in which the implementation on software platforms has become a trend due to the advantages of high programmability and low cost. Recently, the graphic processing units (GPU) is commonly used to accelerate the packet processing because of its superior parallel processing power. Since delivering all packets to GPU causes high data transfer latency and consequently restricts the overall performance, our previous study proposed a mechanism, HPMA, to reduce the effect of transfer bottleneck and achieve higher processing speed. In this paper, we introduce an enhancement of HPMA, a capability-based hybrid CPU/GPU pattern matching algorithm (CHPMA). A preliminary experiment shows that the CHPMA not only performs as efficient as the HPMA in most cases, but also obtains higher performance gain than the HPMA under unfavorable conditions.

Index Terms—Network security, pattern matching algorithm, deep packet inspection (DPI), intrusion detection system (IDS), general-purpose graphics processing unit (GPGPU), compute unified device architecture (CUDA).

Yi-Shan Lin and Yaw-Chung Chen are with the Department of Computer Science, National Chiao Tung University, Hsinchu 30010, Taiwan.
Chun-Liang Lee is with the Department of Computer Science and Information Engineering, School of Electrical and Computer Engineering, College of Engineering, Chang Gung University, Taoyuan 33302, Taiwan.

Cite:Yi-Shan Lin, Chun-Liang Lee, Yaw-Chung Chen, "A Capability-Based Hybrid CPU/GPU Pattern Matching Algorithm for Deep Packet Inspection," International Journal of Computer and Communication Engineering vol. 5, no. 5, pp. 321-330, 2016.

General Information

ISSN: 2010-3743
Frequency: Quarterly
Editor-in-Chief: Dr. Maode Ma
Abstracting/ Indexing: EI (INSPEC, IET), Google Scholar, Crossref, Engineering & Technology Digital Library, ProQuest, and Electronic Journals Library
E-mail: ijcce@iap.org
  • Mar 31, 2016 News!

    IJCCE Vol. 4, No. 5 has been indexed by EI (Inspec) Inspec, created by the Institution of Engineering and Tech.!   [Click]

  • Jun 16, 2017 News!

    Vol. 4, No. 5 has been indexed by EI (Inspec)!   [Click]

  • Jun 15, 2017 News!

    Vol. 4, No. 4 has been indexed by EI (Inspec)!   [Click]

  • Jun 14, 2017 News!

    ICCNT 2017 will be held in Zurich, Switzerland during September 1-3, 2017 ! Welcome to submit your paper to ICCNT 2017 !   [Click]

  • Jun 14, 2017 News!

    Vol. 4, No. 3 has been indexed by EI (Inspec)!   [Click]

  • Read more>>