1

A 3Gbps/30K-Rule Virus-Detection Processor Embedded with Adaptively Dividable Dual-Port BiTCAM for Mobile Devices

People can easily get information from internet through the mobile devices

Through high-speed wireless transmission protocols

Growth of virus on mobile devices will be same as PCs Detecting viruses is a power-consumption task

A hardware for virus detection is required High throughput Low power Low cost & high flexibility

Vir

us

Co

un

t

Dat

a R

ate

(bp

s)

Mainframe

Desktop

Laptop

Handtop

PC >150K viruses

400viruses

1960 1980 2000 2008

100K

10K

1K

100

1990 2000 2008

1000M

100M

10M

1M

2G

3G

WiFi

4G

GSM GPRS

802.11a

802.11b

CDMA

HSDPA

WiMax(75M)

LTE802.11g

802.11n

More than20K viruses

>1Gbps

2

The Proposed Virus-Detection Processor

Virus detection is split into two phases and support new modified algorithms by hardware

Filtering Engine: handle >80% input data By Fast shit table By Signature filtering

Exact-Matching Engine: <20% data need to be precisely checked By efficient Trie Tree

On-chip memory dominates the power and area Proposed BiTCAM reduces them by merging two algorithm’s data

12

3

AHB Bus

8MB DRAM(Suffix Tree)

16-Byte FF-based Payload Buffer

Comparator

32

Single-port TCAM(8KB)

Single-port TCAM(8KB)

4

pointer

Shift Controller

2

3

Filter/EM

1

Pointer Generator

32

32

Exactly-MatchingController

1-step Hash

Controller

Resu

lt Ad

dres

s G

ener

ator

Seria

l-to-

Para

llel

1

0

3232

Filter/EMNext Address

Generator

32

1

032

1-ho

t Cod

e G

ener

ator

32 32 32

2

AHB Wrapper32

32 32 32

128

32

Payload Address for Exactly-Matching

Generator

32Signature Table (yes-plane)

Shift Table (no-plane)

Sig

nat

ure

-SR

AM

(8K

B)

Sh

ift-

SR

AM

(0.5

KB

)

32

1

3

2

Input String

Filtering EngineExact-Match

Engine

Workload > 80% Workload < 20%

Output Result

a b ayes-plane

MSB LSB

MSBInput String

a b c e e f c a

LSB

bno-plane

32-bit

Adjustable division line

Proposed BiTCAM

c b d

e c a

f f f

f

eb e

a b

a b a

c

d

f

a

b

e

e a

e fa c

a a cf e

f f

ab b

c d

f

a c

f e

b c e e

d c a f

e b

c

da a ec

f e

acfe

x

x

x

Port1Port2

3

Chip Micrograph and Features Contribute a high-performance, low-power and low-co

st virus-detection processor Support 3Gbps real-time virus detection for mobile devices. Handle 30,000 ClamAV viruses

Controller

Wrapper and BIST

136

6μm

1612μm

BiT

CA

M+

SR

AM

Ban

k0

Ban

k1

Ban

k2

Ban

k3

Search and Write Buffer

1798μm

179

8μm

Technology 0.13µm 1P8M Mixed

Signal CMOS Process

Core Supply Voltage 1.2V

I/O Supply Voltage 3.3V

Rule Count ClamAV 30,000

On-chip Memory Size 8KB BiTCAM+

8.5KB SRAM

CAM cell area/bit 6.238μm×2.440μm

On-chip Memory Area 1.366mm×1.612mm

Core area 1.798mm×1.798mm

Processor* 131.22mW

Controller* 28.04mW

Wrapper* 20.72mW Power

Memory* 82.46mW

Simulated Clock Freq. 380MHz

Measured Clock Freq. 380MHz

Throughput 3.04Gbps