Comparative Power Analysis of Precomputation Based Content Addressable Memory

Arun Arun

doi:10.3844/jcssp.2011.471.474

Abstract

Problem statement: In this study we discus about Signature Detection Technique (SDT) used in Network Intrusion Detection System (NIDS). Design of SDT using Content Addressable Memory (CAM) is discussed. Approach: Two novel architectures, XOR and ones count based Pre computation CAM architectures are proposed and implemented in third party back end tool with 0.18 mm technology, power consumptions are compared. Results: Proposed architecture consumes 90% less power added with 5.2% increment in speed. Conclusion: Power reduction was achieved by reducing the number of bit comparisons of pre computation technique.

Highlights

Some content strings of Internet packet payload, power consumptions are compared known as “signatures,” imply network intrusion attempts
XOR based Pre Computation CAM (XPCAM): The key idea behind our method is to reduce the number of comparison operations by eliminating the Gaussian distribution
All the Ones Count Pre Computation CAM (OCCAM) and XPCAM, both are implemented in a blocks contain 4 inputs as shown in the upper part of Fig. 4

Summary

Introduction

Some content strings of Internet packet payload, power consumptions are compared known as “signatures,” imply network intrusion attempts. Signature based Network Intrusion Detection System (NIDS) collects these signatures and scans the payload of the Internet packets for them in order to identify, deter and contain such malicious behaviors. A scalable and fast solution is needed to accommodate the largest signature set today and to sustain the real time processing of the high-speed network The problem of CAM based pre computation technique using ones count and XOR respectively are explained. Software based NIDSs (Sendil and Nagarajan, 2009; Yusof et al, 2010; Mohammed et al, 2010) are not scalable to high-speeds. XOR based Pre Computation CAM (XPCAM) and Ones Count Pre Computation CAM (OCCAM) are studied and implemented in third party

Methods

Results

Conclusion