Abstract

The traditional way of protecting networks with firewalls and encryption software is no longer sufficient and effective. Many intrusion detection techniques have been developed on fixed wired networks but have been turned to be inapplicable in this new environment. We need to search for new architecture and mechanisms to protect computer networks. Signature-based Intrusion Detection System matches network packets against a pre-configured set of intrusion signatures. Current implementations of IDS employ only a single thread of execution and as a consequence benefit very little from multi-processor hardware platforms. A multi-threaded technique would allow more efficient and scalable exploitation of these multi-processor machines.

Highlights

  • A signature-based IDS analyzes packets from a computer network and matches them against a set of signatures that trigger on known intruder techniques

  • Intrusion detection systems are often implemented in software on general purpose Central Processing Units (CPUs), often on off-the-shelf server hardware

  • Current signature based IDS are implemented as a single thread of execution and this limits their

Read more

Summary

Introduction

A signature-based IDS analyzes packets from a computer network and matches them against a set of signatures that trigger on known intruder techniques. Intrusion detection systems are often implemented in software on general purpose Central Processing Units (CPUs), often on off-the-shelf server hardware. These systems offer high performance at moderate cost, are flexible and allow easy maintenance. Current signature based IDS are implemented as a single thread of execution and this limits their. To exploit the capabilities of multiple processors, we develop a multi-threaded NIDS sensor This allows to spread the signature matching workload over multiple CPUs of the same machine and performance to scale beyond single-CPU machines

Literature Survey
IDS Types
Conclusions
Full Text
Published version (Free)

Talk to us

Join us for a 30 min session where you can share your feedback and ask us any queries you have

Schedule a call