<?xml version="1.0" encoding="utf-8"?>
<TEI xmlns="http://www.tei-c.org/ns/1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:hal="http://hal.archives-ouvertes.fr/" xmlns:gml="http://www.opengis.net/gml/3.3/" xmlns:gmlce="http://www.opengis.net/gml/3.3/ce" version="1.1" xsi:schemaLocation="http://www.tei-c.org/ns/1.0 http://api.archives-ouvertes.fr/documents/aofr-sword.xsd">
  <teiHeader>
    <fileDesc>
      <titleStmt>
        <title>HAL TEI export of hal-01398569</title>
      </titleStmt>
      <publicationStmt>
        <distributor>CCSD</distributor>
        <availability status="restricted">
          <licence target="https://creativecommons.org/publicdomain/zero/1.0/">CC0 1.0 - Universal</licence>
        </availability>
        <date when="2026-05-03T17:14:53+02:00"/>
      </publicationStmt>
      <sourceDesc>
        <p part="N">HAL API Platform</p>
      </sourceDesc>
    </fileDesc>
  </teiHeader>
  <text>
    <body>
      <listBibl>
        <biblFull>
          <titleStmt>
            <title xml:lang="en">Fast and reconfigurable packet classification engine in FPGA-based firewall</title>
            <author role="aut">
              <persName>
                <forename type="first">Arief</forename>
                <surname>Wicaksana</surname>
              </persName>
              <email type="md5">b450aacd362de8134d85248a38c3ed70</email>
              <email type="domain">imag.fr</email>
              <idno type="idhal" notation="string">arief-wicaksana</idno>
              <idno type="idhal" notation="numeric">10620</idno>
              <idno type="halauthorid" notation="string">32160-10620</idno>
              <idno type="ORCID">https://orcid.org/0000-0002-6679-6641</idno>
              <idno type="GOOGLE SCHOLAR">https://scholar.google.fr/citations?hl=fr&amp;user=BKE-Fd4AAAAJ</idno>
              <affiliation ref="#struct-472177"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Arif</forename>
                <surname>Sasongko</surname>
              </persName>
              <idno type="halauthorid">879821-0</idno>
              <affiliation ref="#struct-472177"/>
            </author>
            <editor role="depositor">
              <persName>
                <forename>Arief</forename>
                <surname>Wicaksana</surname>
              </persName>
              <email type="md5">b450aacd362de8134d85248a38c3ed70</email>
              <email type="domain">imag.fr</email>
            </editor>
          </titleStmt>
          <editionStmt>
            <edition n="v1" type="current">
              <date type="whenSubmitted">2016-11-17 14:26:41</date>
              <date type="whenModified">2025-08-12 15:18:28</date>
              <date type="whenReleased">2016-11-18 14:59:45</date>
              <date type="whenProduced">2011-07-17</date>
              <date type="whenEndEmbargoed">2016-11-17</date>
              <ref type="file" target="https://hal.univ-grenoble-alpes.fr/hal-01398569v1/document">
                <date notBefore="2016-11-17"/>
              </ref>
              <ref type="file" subtype="author" n="1" target="https://hal.univ-grenoble-alpes.fr/hal-01398569v1/file/paper.pdf" id="file-1398569-1482223">
                <date notBefore="2016-11-17"/>
              </ref>
              <ref type="externalLink" target="http://arxiv.org/pdf/1611.06078"/>
            </edition>
            <respStmt>
              <resp>contributor</resp>
              <name key="392516">
                <persName>
                  <forename>Arief</forename>
                  <surname>Wicaksana</surname>
                </persName>
                <email type="md5">b450aacd362de8134d85248a38c3ed70</email>
                <email type="domain">imag.fr</email>
              </name>
            </respStmt>
          </editionStmt>
          <publicationStmt>
            <distributor>CCSD</distributor>
            <idno type="halId">hal-01398569</idno>
            <idno type="halUri">https://hal.univ-grenoble-alpes.fr/hal-01398569</idno>
            <idno type="halBibtex">wicaksana:hal-01398569</idno>
            <idno type="halRefHtml">&lt;i&gt;2011 International Conference on Electrical Engineering and Informatics (ICEEI)&lt;/i&gt;, Jul 2011, Bandung, Indonesia. &lt;a target="_blank" href="https://dx.doi.org/10.1109/ICEEI.2011.6021782"&gt;&amp;#x27E8;10.1109/ICEEI.2011.6021782&amp;#x27E9;&lt;/a&gt;</idno>
            <idno type="halRef">2011 International Conference on Electrical Engineering and Informatics (ICEEI), Jul 2011, Bandung, Indonesia. &amp;#x27E8;10.1109/ICEEI.2011.6021782&amp;#x27E9;</idno>
            <availability status="restricted">
              <licence target="https://about.hal.science/hal-authorisation-v1/">HAL Authorization<ref corresp="#file-1398569-1482223"/></licence>
            </availability>
          </publicationStmt>
          <seriesStmt>
            <idno type="stamp" n="UGA">HAL Grenoble Alpes</idno>
          </seriesStmt>
          <notesStmt>
            <note type="audience" n="2">International</note>
            <note type="invited" n="0">No</note>
            <note type="popular" n="0">No</note>
            <note type="peer" n="1">Yes</note>
            <note type="proceedings" n="0">No</note>
          </notesStmt>
          <sourceDesc>
            <biblStruct>
              <analytic>
                <title xml:lang="en">Fast and reconfigurable packet classification engine in FPGA-based firewall</title>
                <author role="aut">
                  <persName>
                    <forename type="first">Arief</forename>
                    <surname>Wicaksana</surname>
                  </persName>
                  <email type="md5">b450aacd362de8134d85248a38c3ed70</email>
                  <email type="domain">imag.fr</email>
                  <idno type="idhal" notation="string">arief-wicaksana</idno>
                  <idno type="idhal" notation="numeric">10620</idno>
                  <idno type="halauthorid" notation="string">32160-10620</idno>
                  <idno type="ORCID">https://orcid.org/0000-0002-6679-6641</idno>
                  <idno type="GOOGLE SCHOLAR">https://scholar.google.fr/citations?hl=fr&amp;user=BKE-Fd4AAAAJ</idno>
                  <affiliation ref="#struct-472177"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Arif</forename>
                    <surname>Sasongko</surname>
                  </persName>
                  <idno type="halauthorid">879821-0</idno>
                  <affiliation ref="#struct-472177"/>
                </author>
              </analytic>
              <monogr>
                <meeting>
                  <title>2011 International Conference on Electrical Engineering and Informatics (ICEEI)</title>
                  <date type="start">2011-07-17</date>
                  <date type="end">2011-07-19</date>
                  <settlement>Bandung</settlement>
                  <country key="ID">Indonesia</country>
                </meeting>
                <imprint/>
              </monogr>
              <idno type="arxiv">1611.06078</idno>
              <idno type="doi">10.1109/ICEEI.2011.6021782</idno>
            </biblStruct>
          </sourceDesc>
          <profileDesc>
            <langUsage>
              <language ident="en">English</language>
            </langUsage>
            <textClass>
              <keywords scheme="author">
                <term xml:lang="en"> Processor Architecture </term>
                <term xml:lang="en"> Tree-Based Algorithm</term>
                <term xml:lang="en">Packet Classification Engine</term>
              </keywords>
              <classCode scheme="halDomain" n="info.info-ar">Computer Science [cs]/Hardware Architecture [cs.AR]</classCode>
              <classCode scheme="halDomain" n="info.info-ni">Computer Science [cs]/Networking and Internet Architecture [cs.NI]</classCode>
              <classCode scheme="halTypology" n="COMM">Conference papers</classCode>
              <classCode scheme="halOldTypology" n="COMM">Conference papers</classCode>
              <classCode scheme="halTreeTypology" n="COMM">Conference papers</classCode>
            </textClass>
            <abstract xml:lang="en">
              <p>In data communication via internet, security is becoming one of the most influential aspects. One way to support  it is by classifying and filtering ethernet packets within network devices. Packet classification is a fundamental task for network devices such as routers, firewalls, and intrusion detection systems. In this paper we present architecture of fast and reconfigurable Packet Classification Engine (PCE). This engine is used in FPGA-based firewall. Our PCE inspects multi-dimensional field of packet header sequentially based on tree-based algorithm. This algorithm simplifies overall system to a lower scale and leads to a more secure system. The PCE works with an adaptation of single cycle processor architecture in the system. Ethernet packet is examined with PCE based on Source IP Address, Destination IP Address, Source Port, Destination Port, and Protocol fields of the packet header. These are basic fields to know whether it is a dangerous or normal packet before inspecting the content. Using implementation of tree-based algorithm in the architecture, firewall rules are rebuilt into 24-bit sub-rules which are read as processor instruction in the inspection process. The inspection process is comparing one sub-rule with input field of header every clock cycle. The proposed PCE shows 91 MHz clock frequency in Cyclone II EP2C70F896C6 with 13 clocks throughput average from input to output generation. The use of tree-based algorithm simplifies the multidimensional packet inspection and gives us reconfigurable as well as scalable system. The architecture is fast, reliable, and adaptable and also can maximize the advantages of the algorithm very well. Although the PCE has high frequency and little amount of clock, filtering speed of a firewall also depends on the other components, such as packet FIFO buffer. Fast and reliable FIFO buffer is needed to support the PCE. This PCE also is not completed with rule update mechanism yet. This proposed PCE is tested as a component of FPGA-based firewall to filter Ethernet packet with FPGA DE2 Board using NIOS II platform. </p>
            </abstract>
          </profileDesc>
        </biblFull>
      </listBibl>
    </body>
    <back>
      <listOrg type="structures">
        <org type="institution" xml:id="struct-472177" status="VALID">
          <orgName>Institut Teknologi Bandung</orgName>
          <orgName type="acronym">ITB</orgName>
          <desc>
            <address>
              <addrLine>West Java Indonesia</addrLine>
              <country key="ID"/>
            </address>
            <ref type="url">https://www.itb.ac.id/</ref>
          </desc>
        </org>
      </listOrg>
    </back>
  </text>
</TEI>