Back to results
US 7,735,135 B1Granted
Hardware-based intrusion detection accelerator
AssigneeJuniper Networks, Inc.
InventorAibing Zhou
Life of this patent
Estimating the term…
Abstract
A system and method for intrusion detection and prevention processing are described. Spin state information associated with a signature may be prefetched by a network device having one or more buffers. The spin state information may be stored by the buffer. Context data may be searched using the spin state information stored by the buffer.
Claims23
A method performed by a network device, comprising:
- prefetching, by the network device, spin state information, of a spin state associated with a signature, from a finite state automaton stored in a memory that is external to the network device;
- lockingly storing the prefetched spin state information in at least one buffer of the network device;
- performing, by the network device, a first search of context data using the spin state information stored in the at least one buffer;
- performing, by the network device accessing the external memory when a first state transition occurs to a next state as a result of the first search, a second search of the context data using non-spin state information associated with the signature;
- and
- performing, by the network device when a second state transition occurs to the spin state as a result of the second search, a third search of the context data using the spin state information stored in the at least one buffer.
3 more elements
A network device comprising:
- logic to prefetch, from a finite state automaton stored in an external memory, spin state information associated with a signature;
- a buffer to lockingly store the prefetched spin state information;
- a search engine to search context data using the stored spin state information, where:
- the logic is to fetch non-spin state information associated with the signature from the external memory when a state transition occurs to a next state based on the first search,
- the search engine is to additionally search the context data using the fetched non-spin state information, and
- the search engine is further to search the context data using the stored spin state information when a state transition occurs to the spin state as a result of the additional searching using the fetched non-spin state information.
3 more elements
An intrusion detection system comprising:
- means for prefetching a spin row from a state transition table stored in an external memory;
- means for lockingly storing the prefetched spin row;
- means for searching context data related to a packet payload, using the lockingly stored spin row;
- means for fetching, when a state transition occurs to a next state based on the searching the context data using the stored spin row, at least one non-spin row from the state transition table stored in the external memory;
- means for searching the context data using the fetched at least one non-spin row;
- and
- means for searching, when a state transition occurs to the spin row as a result of the searching the context data using the fetched at least one non-spin state row, the context data using the lockingly stored spin row.
4 more elements
Dependencies are inferred from the claim text.