Abstract:Abstract Malware is essentially one of the major security issues that have the potential to break the computer operations instantly. Majority of the internet attacks are caused by malwares that are being distributed through HTTP over the Internet. A Firewall is essential to prevent such internet attacks for enhancing the security measures. The most efficient method to prevent Intrusion in the network is Deep Packet Inspection (DPI), which is presently implemented in advanced firewalls. This research work intends to detect and prevent the intrusion in the network using a hybrid method with DPI, Pattern Matching (PM), and Machine Learning (ML) techniques. In this present work, a hybrid method which involves the functionalities of both DPI and ML is used for classification and identification of attacks. Here, DPI is done by Boyer-Moore-Horspool (BMHP) pattern matching algorithm and ten ML algorithms such as Support Vector Machines (SVM), Linear-SVM (L-SVM), K-Nearest Neighbors (KNN), Multi-Layer Perceptron (MLP), Decision Tree (DT), Random Forest (RF), AdaBoost (Ada), Gaussian Naive Bayes (GaNB) and Bernouli Naive Bayes (BeNB) are employed for classification. Subsequently, the proposed work is evaluated in a sequential and parallel manner and it is customized for identifying the fuzzy, impersonation and Denial of Service (DoS)-based attacks. The proposed system is analyzed in different dimensions such as performance of ML methods and role of DPI in attack identification including the pattern matching efficiency. From the investigation, it is identified that BMHP algorithm has the least time and memory consumed values about 0.0028 sec and 125.4 Mib respectively. Similarly, SVM has the accuracy of 99.91% with the least time and memory consumed values about 18.185 sec and 303.5 MiB respectively.

Research and Design of a Novel Deep Packet Inspection Engine

Pre-decision Detection Engine for Signature-Based Network Intrusion Detection System

Fast String Matching with Overlapped Substring Classifier in Deep Packet Inspection Systems

Fast Packet Inspection Using State-Based Bloom Filter Engine

Ultra-High Throughput String Matching for Deep Packet Inspection

Intrusion Detection And Simulation For High-Speed Networks

A Fast Multi-pattern Matching Algorithm for Deep Packet Inspection on a Network Processor

A High Performance and Scalable Packet Pattern-Matching Architecture

A Digest and Pattern Matching-Based Intrusion Detection Engine

StriD²FA: Scalable Regular Expression Matching for Deep Packet Inspection

Accelerating Deep Packet Inspection With SIMD-Based Multi-Literal Matching Engine

Strid(2)Fa: Scalable Regular Expression Matching For Deep Packet Inspection

Extraction of Fingerprint from Regular Expression for Efficient Prefiltering

Research and Implementation of Efficient DPI Engine Base on DPDK

Parallel Architecture for High Throughput DFA-Based Deep Packet Inspection

A Memory-Efficient Parallel String Matching Architecture for High-Speed Intrusion Detection

Performance Analysis of Machine Learning and Pattern Matching Techniques for Deep Packet Inspection in Firewalls

Cache-Based Scalable Deep Packet Inspection with Predictive Automaton.

Longest Prefix Matching with Pruning

AntiWorm NPU-based Parallel Bloom Filters in Giga-Ethernet LAN.

A Scalable Bloom Filter Based Prefilter and Hardware-Oriented Predispatcher