HARDWARE-SOFTWARE CODESIGN FOR HIGH-SPEED SIGNATURE-BASED VIRUS SCANNING

Abstract

HIGH-SPEED NETWORK CONTENT SECURITY APPLICATIONS OFTEN OFFLOAD SIGNATURE MATCHING TO HARDWARE. IN SUCH SYSTEMS, THE THROUGHPUT OF THE OVERALL SYSTEM, RATHER THAN THE HARDWARE ENGINE ALONE, IS SIGNIFICANT. THE AUTHORS OFFLOAD VIRUS SCANNING IN THE CLAMAV ANTIVIRUS PACKAGE TO THE BFAST* HARDWARE ENGINE. THEY FIND THAT THE DATA-PASSING PROCESSES SIGNIFICANTLY DEGRADE SYSTEM THROUGHPUT.