IEICE Electronics Express
Online ISSN : 1349-2543
High-throughput intrusion detection system with parallel pattern matching
Yi-Mao HsiaoMing-Jen ChenYuan-Sun ChuChung-Hsun Huang
Author information
Keywords: IDS, Snort, ASIC
JOURNALS FREE ACCESS

2012 Volume 9 Issue 18 Pages 1467-1472

Details
Abstract

This paper proposes a high-throughput intrusion detection system (IDS) with a bloom filter-based header comparison and parallel pattern matching for the packet content. The parallel pattern matching is a two parallel sequence comparison architecture that compares the packet content with the Snort rules. The proposed hardware IDS not only performs high throughput, but also reduces the rules memory size. As shown in post-layout simulation of the implemented application-specific integrated circuit (ASIC), the speed reaches 453MHz that performs 7.2Gbps system throughput to deal with the traffic requirement of edge speed in end user network. With 8MB off-chip SRAM, the system supports 4,020 Snort rules that the pattern number is enough for intruder signature.

Information related to the author
© 2012 by The Institute of Electronics, Information and Communication Engineers
Previous article Next article
feedback
Top