Methods and systems for full pattern matching in hardware

Methods and systems are provided for hardware-based pattern matching. In an embodiment, an intrusion-prevention system (IPS) identifies a full match between a subject data word comprising subject-data blocks and a signature data pattern comprising signature-data blocks. The IPS receives the subject data word via a network interface, and thereafter makes a partial-match determination that two or more but less than all of the subject-data blocks respectively match the same number of the signature-data blocks stored in partial-match hardware with respect to both value and position. Thereafter, the IPS makes a full-match determination that all of the subject-data blocks respectively match all of the signature-data blocks stored in the IPS's full-match hardware with respect to both value and position. The IPS then stores an indicator that the full-match determination has been made, and may carry out one or more additional intrusion-prevention responses as well.

Receive and transmit blocks for asynchronous transfer mode (ATM) cell delineation

Receive and transmit blocks for asynchronous transfer mode (ATM) cell delineation are disclosed. The receive block has a plurality of cell delineation blocks, a memory controller, a memory and a bus controller. The transmit block has a bus controller, a plurality of queue selection devices, a plurality of memory queues and a plurality of cell delineation blocks. According to one implementation, the bus controllers receive address mode/select signals and operate to respond to one of a plurality of subsets of port addresses on the ATM physical layer responsive to the address mode/select signals.

METHODS AND SYSTEMS FOR FULL PATTERN MATCHING IN HARDWARE

Methods and systems are provided for hardware-based pattern matching. In an embodiment, an intrusion-prevention system (IPS) identifies a full match between a subject data word comprising subject-data blocks and a signature data pattern comprising signature-data blocks. The IPS receives the subject data word via a network interface, and thereafter makes a partial-match determination that two or more but less than all of the subject-data blocks respectively match the same number of the signature-data blocks stored in partial-match hardware with respect to both value and position. Thereafter, the IPS makes a full-match determination that all of the subject-data blocks respectively match all of the signature-data blocks stored in the IPS's full-match hardware with respect to both value and position. The IPS then stores an indicator that the full-match determination has been made, and may carry out one or more additional intrusion-prevention responses as well.

METHODS AND SYSTEMS FOR FULL PATTERN MATCHING IN HARDWARE

According to an example, an intrusion-prevention system may include a network interface to receive a subject data word via a network. The intrusion-prevention system may include hardware to determine whether the subject data word partially matches a signature data pattern, and determine whether the subject data word fully matches the signature data pattern if the subject data word partially matches the signature data pattern. 160-. (canceled)61. An intrusion-prevention system (IPS) comprising:a network interface to receive a subject data word via a network; and determine whether the subject data word partially matches a signature data pattern,', 'determine the subject data word is not a match of the signature data pattern if the subject data word does not partially match the signature data pattern, and', 'determine whether the subject data word fully matches the signature data pattern if the subject data word partially matches the signature data pattern., 'hardware to'}62. The IPS of claim 61 , wherein the subject data word includes data blocks and the signature pattern includes data blocks claim 61 , and to determine if the subject data word does not partially match the signature data pattern claim 61 , the hardware is to determine whether a subset of the data blocks less than all the data blocks in the subject data word does not match any corresponding data blocks in the signature data pattern.63. The IPS of claim 62 , wherein to determine whether the subset of the data blocks less than all the data blocks in the subject data word does not match any corresponding data blocks in the signature data pattern claim 62 , the hardware is to determine whether the subset of the data blocks in the subject data word matches data blocks in the signature data pattern with respect to both value and position.64. The IPS of claim 61 , wherein to determine whether the subject data word fully matches the signature data pattern claim 61 , the hardware is to determine whether all of ...

METHODS AND SYSTEMS FOR FULL PATTERN MATCHING IN HARDWARE

Methods and systems are provided for hardware-based pattern matching. In an embodiment, an intrusion-prevention system (IPS) identifies a full match between a subject data word comprising subject-data blocks and a signature data pattern comprising signature-data blocks. The IPS receives the subject data word via a network interface, and thereafter makes a partial-match determination that two or more but less than all of the subject-data blocks respectively match the same number of the signature-data blocks stored in partial-match hardware with respect to both value and position. Thereafter, the IPS makes a full-match determination that all of the subject-data blocks respectively match all of the signature-data blocks stored in the IPS's full-match hardware with respect to both value and position. The IPS then stores an indicator that the full-match determination has been made, and may carry out one or more additional intrusion-prevention responses as well. 1. A method of examining a subject data word , the subject data word comprising a plurality of subject-data blocks , and identifying a full match between the subject data word and a signature data pattern , the signature data pattern comprising a plurality of signature-data blocks , wherein each of the subject-data blocks and each of the signature-data blocks has (i) a respective value and (ii) a respective position , the method carried out by an intrusion-prevention system (IPS) comprising at least one processor , at least one network interface , partial-match hardware having at least part of the signature data pattern stored therein , and full-match hardware having the signature data pattern stored therein , the method comprising:the IPS receiving the subject data word via the at least one network interface;the IPS making a partial-match determination comprising a determination that a partial-match number of the subject-data blocks respectively match the same partial-match number of the signature-data blocks ...

Receive and transmit blocks for asynchronous transfer mode (ATM) cell delineation

Receive and transmit blocks for asynchronous transfer mode (ATM) cell delineation are disclosed. The receive block has a plurality of cell delineation blocks, a memory controller, a memory and a bus controller. The transmit block has a bus controller, a plurality of queue selection devices, a plurality of memory queues and a plurality of cell delineation blocks. According to one implementation, the bus controllers receive address mode/select signals and operate to respond to one of a plurality of subsets of port addresses on the ATM physical layer responsive to the address mode/select signals.

Methods and systems for full pattern matching in hardware

According to an example, an intrusion-prevention system may include a network interface to receive a subject data word via a network. The intrusion-prevention system may include hardware to determine whether the subject data word partially matches a signature data pattern, and determine whether the subject data word fully matches the signature data pattern if the subject data word partially matches the signature data pattern.

Interleaved read/write operation in a data switch

An interleaved read/write operation in a data switch determines a read memory of at least two memories that has been accessed during a most recent read operation. A memory controller determines a write memory different from the read memory and accesses a cell buffer list associated with the write memory to determine a buffer to store the cell. The switch writes the cell to the buffer to interleave read/write operations between the read memory and the write memory.

Methods and systems for full pattern matching in hardware

Methods and systems are provided for hardware-based pattern matching. In an embodiment, an intrusion-prevention system (IPS) identifies a full match between a subject data word comprising subject-data blocks and a signature data pattern comprising signature-data blocks. The IPS receives the subject data word via a network interface, and thereafter makes a partial-match determination that two or more but less than all of the subject-data blocks respectively match the same number of the signature-data blocks stored in partial-match hardware with respect to both value and position. Thereafter, the IPS makes a full-match determination that all of the subject-data blocks respectively match all of the signature-data blocks stored in the IPS's full-match hardware with respect to both value and position. The IPS then stores an indicator that the full-match determination has been made, and may carry out one or more additional intrusion-prevention responses as well.

Methods and systems for full pattern matching in hardware