Software-based Packet Classification in Network Intrusion Detection System using Network Processor

Abstract

As computer networking grows more important in daily usage, its security is also paramount. Network Intrusion Detection System (NIDS) observes network traffic for identifying malicious packets. Core to NIDS function is packet classification component. It is in charge of scanning network packet header. An improved packet classification component bears direct result for NIDS performance. This paper discusses technique to improve packet classification through the use of Bloom Filter and hash table lookup. Because packet classification is an important function to other networking infrastructure, for instance firewall, quality of service, multimedia communication, an improved packet classification scheme could benefit application in related areas.