High-performance Architecture of Network Intrusion Prevention Systems

Network Performance and Network Intrusion Detection Systems

This study investigates the potential impact an ethernet bridge based Network Intrusion Detection System (NIDS) would have upon network performance. Three operating systems( OpenBSD, FreeBSD and Linux) were used to test three bridges. The impact of these bridges on network performance while running a NIDS Snort in various modes of data capture was evaluated. The results from this study reveal t...

High-performance Network Intrusion Detection through Parallelism

Schuff, Derek L. M.S.E.C.E, Purdue University, May, 2007. High-Performance Network Intrusion Detection through Parallelism. Major Professor: Vijay S. Pai. Network intrusion detection has become increasingly popular in recent years due to the proliferation of Internet-based security attacks. Network intrusion detection systems (NIDS) inspect the content of incoming packets on a network for known...

Resource allocation in network processors for network intrusion prevention systems

Networking applications with high memory access overhead gradually exploit network processors that feature multiple hardware multithreaded processor cores along with a versatile memory hierarchy. Given rich hardware resources, however, the performance depends on whether those resources are properly allocated. In this work, we develop an NIPS (Network Intrusion Prevention System) edge gateway ov...

Intrusion Detection Systems and Intrusion Prevention Systems

A High-Throughput System Architecture for Deep Packet Filtering in Network Intrusion Prevention

Pattern matching is one of critical parts of Network Intrusion Prevention Systems (NIPS). Pattern matching hardware for NIPS should find a matching pattern at wire speed. However, that alone is not good enough. First, pattern matching hardware should be able to generate sufficient pattern match information including the pattern index number and the location of the match found at wire speed. Sec...