Method and apparatus for detecting predefined signatures in packet payload using Bloom filters
US7444515B2 · kind B2 · utility
105Cited by
14References
57Claims
0Family size
Assignee
Inventors
Key dates
| Filing date | Aug 14, 2003 |
| Grant date | Oct 28, 2008 |
| Priority date | — |
| Expiry date | Apr 1, 2026 |
Classification
- Technology area (CPC H)Electricity
- CPC primaryH04L63/145
- WIPO fieldDigital communication
- WIPO sectorElectrical engineering
Abstract
The present invention relates to a method and apparatus based on Bloom filters for detecting predefined signatures (a string of bytes) in a network packet payload. A Bloom filter is a data structure for representing a set of strings in order to support membership queries. Hardware Bloom filters isolate all packets that potentially contain predefined signatures. Another independent process eliminates false positives produced by the Bloom filters. The system is implemented on a FPGA platform, resulting in a set of 10,000 strings being scanned in the network data at the line speed of 2.4 Gbps.
Source: USPTO / EPO open patent data. Objective bibliographic and citation counts.