Abstract:Nowadays efficient usage of high-tech security tools and appliances is considered as an important criterion for security improvement of computer networks. Based on this assumption, Intrusion Detection and Prevention Systems (IDPS) have key role for applying the defense in depth strategy. In this situation, by increasing network bandwidth in addition to increasing number of threats, Network-based IDPSes have been faced with performance challenge for processing of huge traffic in the networks. A general solution for this bottleneck is exploitation of efficient hardware architectures for performance improvement of IDPS. In this paper a framework for analysis and performance evaluation of application specific instruction set processors is presented for usage in application of attack detection in Networkbased Intrusion Detection Systems(NIDS). By running this framework as a security application on V850, OR1K, MIPS32, ARM7TDMI and PowerPC32 microprocessors, their performance has been evaluated and analyzed. For performance improvement, the compiler optimization levels are employed and at the end; base on O2 optimization level a new combination of optimization flags is presented. The experiments show that the framework results 18.10% performance improvements for pattern matching on ARM7TDMI microprocessors.

Research and Implementation of Intrusion Detection on Network Processor

Embedded network processor based parallel intrusion detection

Intrusion Detection And Simulation For High-Speed Networks

Implementation of Network Processor-Based Content Filtering

On a Distributed Intrusion Detection Model Based on the Super-Peer Framework

Research of Distributed Pre-Decision Engine in Wireless Intrusion Prevention Systems

Traffic Distributor for High-Speed Network Intrusion Detection System

Towards High-Performance Network Intrusion Prevention System on Multi-core Network Services Processor

Design of Traffic Distributor Based on IXP1200 for Network Intrusion Detection System

Network Safeguard System Based on IDXP

Hybrid Intrusion Detection System for Complicated Network

Research on Data Mining-based Intrusion Detection in Real-time Environment

Adding Security to Network Via Network Processors

Design and Implementation of Kilomega Wirespeed Intrusion Detect System

Research on Distributed Intrusion Prevention System on High-Speed Networks

Architecture-Aware Session Lookup Design for Inline Deep Inspection on Network Processors

Network Processor IXP425 and Its Application

Research and Implementation of High-Speed Packet Processing in Gigabit Network IPS

Intranet security strategy based on a monitor system

A Framework For Performance Evaluation Of ASIPS In Network-Based IDS

An overview to Software Architecture in Intrusion Detection System