A 10-Gbps High-Speed Single-Chip Network Intrusion Detection and Prevention System
| Citations: | 1 - 1 self |
BibTeX
@MISC{Artan_a10-gbps,
author = {N. Sertac Artan and Rajdip Ghosh and Yanchuan Guo and H. Jonathan Chao},
title = {A 10-Gbps High-Speed Single-Chip Network Intrusion Detection and Prevention System},
year = {}
}
Bookmark
 |
 |
 |
 |
 |
 |
OpenURL
Abstract
(NIDPSs) are vital in the fight against network intrusions. NIDPSs search for certain malicious content in network traffic (i.e., signatures). Comparing all traffic to these signatures is a challenge for high-speed networks. In this paper, we present the implementation of a 10-Gbps hardware NIDPS and related design issues. This goal of signature detection at high-speed is achieved using a single FPGA, without any external memory. We also implemented and tested a proof-of-concept system with 1-Gbps traffic. A database to store and a web server to display the intrusion alerts from the NIDPS were also developed for this system. I.
