A FPGA-based deep packet inspection engine for Network Intrusion Detection System
Electrical Engineering/Electronics, Computer, Telecommunications and Information Technology(2012)
摘要
Pattern matching has became a bottleneck of software based Network Intrusion Detection System (NIDS) as the number of signature have recently increased dramatically. Many FPGA-based architectures for detecting malicious patterns have been proposed recently. However, these approaches have just considered matching pattern separately while more and more complex combination of several patterns are utilized to describe intrusion activities. In this paper we present our work which concentrates on multi-pattern signature and propose a FPGA-based deep packet inspection engine for NIDS. The system can support both static and dynamic patterns. We employ Snort signature set and realize our system on NetFPGA platform. The evaluation on real network environment shows that our system can maintain gigabit line rate throughput without dropping packets.
更多查看译文
关键词
computer network security,digital signatures,field programmable gate arrays,pattern matching,FPGA-based architecture,FPGA-based deep packet inspection engine,NIDS,NetFPGA platform,Snort signature set,dynamic patterns,gigabit line rate throughput,malicious pattern detection,multipattern signature,pattern matching,software based network intrusion detection system,static patterns,DPI,FPGA,NFA,NIDS/NIPS,Regular Expression,cuckoo hashing,multi-pattern matching,
AI 理解论文
溯源树
样例
生成溯源树,研究论文发展脉络
Chat Paper
正在生成论文摘要