Study on high-speed network intrusion detection based on network processor

被引：0
|
作者：
Computer Network Key Lab., South China University of Technology, Guangzhou 510640, China [1 ]
不详 [2 ]
机构：
来源：
Zhongshan Daxue Xuebao | 2006年 / SUPPL.卷 / 31-34期
关键词：
Computer crime - Computer networks - Data structures - Decoding - Microprocessor chips;
D O I：
暂无
中图分类号：
学科分类号：
摘要：
In order to improve attack detection rate and processing capability of intrusion detection system on high-speed environment, NP-NIDS: a high-speed intrusion detection system based on IXP2400 network processor is studied, designed and implemented. Multi-processor, multi-process and RM communication mechanism are used and new decoded data structure, core functional modules and process schedule policies are designed to resolve bottleneck of seizing packet and speed detection and analysis. Performance is tested using Smartbit and real network traffic from network center of south China, availability and feasibility are validated.
引用
收藏
相关论文
共 50 条
  • [1] Intrusion detection system for high-speed network
    Yang, W
    Fang, BX
    Liu, B
    Zhang, HL
    [J]. COMPUTER COMMUNICATIONS, 2004, 27 (13) : 1288 - 1294
  • [2] Intrusion detection technology research based high-speed network
    Bo, S
    Ming, Y
    Jie, L
    [J]. PARALLEL AND DISTRIBUTED COMPUTING, APPLICATIONS AND TECHNOLOGIES, PDCAT'2003, PROCEEDINGS, 2003, : 206 - 210
  • [3] Study of High-Speed Processing for Network Intrusion Detection System
    Liu, Hui
    [J]. MATERIALS AND MANUFACTURING TECHNOLOGY, PTS 1 AND 2, 2010, 129-131 : 1410 - 1414
  • [4] Research on High-speed Network-based Intrusion Detection System
    Liu Ting
    Meng Qingwei
    [J]. 2012 7TH INTERNATIONAL CONFERENCE ON SYSTEM OF SYSTEMS ENGINEERING (SOSE), 2012, : 363 - 365
  • [5] High-speed string matching for network intrusion detection
    Soewito, Benfano
    Mahajan, Atul
    Weng, Ning
    Wang, Haibo
    [J]. INTERNATIONAL JOURNAL OF COMMUNICATION NETWORKS AND DISTRIBUTED SYSTEMS, 2009, 3 (04) : 319 - 339
  • [6] Network processor based network intrusion detection system
    Cho, H
    Kim, D
    Kim, J
    Doh, Y
    Jang, J
    [J]. INFORMATION NETWORKING: NETWORKING TECHNOLOGIES FOR BROADBAND AND MOBILE NETWORKS, 2004, 3090 : 973 - 982
  • [7] Network processor for high-speed network and quick programming
    Murooka, Takahiro
    Nagoya, Akira
    Miyazaki, Toshiaki
    Ochi, Hiroyuki
    Nakamura, Yukihiro
    [J]. JOURNAL OF CIRCUITS SYSTEMS AND COMPUTERS, 2007, 16 (01) : 65 - 79
  • [8] Evaluating Network Intrusion Detection Systems for High-Speed Networks
    Hu, Qinwen
    Asghar, Muhammad Rizwan
    Brownlee, Nevil
    [J]. 2017 27TH INTERNATIONAL TELECOMMUNICATION NETWORKS AND APPLICATIONS CONFERENCE (ITNAC), 2017, : 402 - 407
  • [9] Intrusion detection methods based on network processor
    Wei, Lihua
    Zhang, Xiaoming
    Tang, Yuhua
    Sun, Zhigang
    [J]. Jisuanji Gongcheng/Computer Engineering, 2006, 32 (07): : 160 - 162
  • [10] Intensive packet domain mining engine (IPDME) A high-speed pre-processor for network intrusion detection
    Velliangiri, S.
    [J]. INTERNATIONAL JOURNAL OF INTELLIGENT UNMANNED SYSTEMS, 2019, 7 (04) : 135 - 149
12345