High-throughput intrusion detection system with parallel pattern matching

IEICE Electronics Express

Ming-Jen Chen¹  Yi-Mao Hsiao¹  Chung-Hsun Huang¹  Yuan-Sun Chu¹ 

[1] Institute of Electrical Engineering, National Chung Cheng University

关键词: IDS;    Snort;    ASIC;   

DOI  :  10.1587/elex.9.1467

学科分类：电子、光学、磁材料

来源: Denshi Jouhou Tsuushin Gakkai

【 摘 要 】

References(7)This paper proposes a high-throughput intrusion detection system (IDS) with a bloom filter-based header comparison and parallel pattern matching for the packet content. The parallel pattern matching is a two parallel sequence comparison architecture that compares the packet content with the Snort rules. The proposed hardware IDS not only performs high throughput, but also reduces the rules memory size. As shown in post-layout simulation of the implemented application-specific integrated circuit (ASIC), the speed reaches 453MHz that performs 7.2Gbps system throughput to deal with the traffic requirement of edge speed in end user network. With 8MB off-chip SRAM, the system supports 4,020 Snort rules that the pattern number is enough for intruder signature.

【 授权许可】

Unknown