  Large industrial systems that combine services and applications, have become
targets for cyber criminals and are challenging from the security, monitoring
and auditing perspectives. Security log analysis is a key step for uncovering
anomalies, detecting intrusion, and enabling incident response. The constant
increase of link speeds, threats and users, produce large volumes of log data
and become increasingly difficult to analyse on a Central Processing Unit
(CPU). This paper presents a massively parallel Graphics Processing Unit (GPU)
LOg Processing (GLoP) library and can also be used for Deep Packet Inspection
(DPI), using a prefix matching technique, harvesting the full power of
off-the-shelf technologies. GLoP implements two different algorithm using
different GPU memory and is compared against CPU counterpart implementations.
The library can be used for processing nodes with single or multiple GPUs as
well as GPU cloud farms. The results show throughput of 20Gbps and demonstrate
that modern GPUs can be utilised to increase the operational speed of large
scale log processing scenarios, saving precious time before and after an
intrusion has occurred.
