Abstract:Nowadays efficient usage of high-tech security tools and appliances is considered as an important criterion for security improvement of computer networks. Based on this assumption, Intrusion Detection and Prevention Systems (IDPS) have key role for applying the defense in depth strategy. In this situation, by increasing network bandwidth in addition to increasing number of threats, Network-based IDPSes have been faced with performance challenge for processing of huge traffic in the networks. A general solution for this bottleneck is exploitation of efficient hardware architectures for performance improvement of IDPS. In this paper a framework for analysis and performance evaluation of application specific instruction set processors is presented for usage in application of attack detection in Networkbased Intrusion Detection Systems(NIDS). By running this framework as a security application on V850, OR1K, MIPS32, ARM7TDMI and PowerPC32 microprocessors, their performance has been evaluated and analyzed. For performance improvement, the compiler optimization levels are employed and at the end; base on O2 optimization level a new combination of optimization flags is presented. The experiments show that the framework results 18.10% performance improvements for pattern matching on ARM7TDMI microprocessors.

Design and Implementation of a High Performance Intrusion Prevention System

Intrusion Detection And Simulation For High-Speed Networks

Research of Distributed Pre-Decision Engine in Wireless Intrusion Prevention Systems

Embedded network processor based parallel intrusion detection

Towards High-Performance Network Intrusion Prevention System on Multi-core Network Services Processor

Design and Implementation of a Gigabit Rate Network Intrusion Prevention System

Research and Implementation of High-Speed Packet Processing in Gigabit Network IPS

Research on Distributed Intrusion Prevention System on High-Speed Networks

Hybrid Intrusion Detection System for Complicated Network

Traffic Distributor for High-Speed Network Intrusion Detection System

A Parallel Intrusion Detection System for High-Speed Networks

Implementation of Network Processor-Based Content Filtering

Research and Implementation of Efficient DPI Engine Base on DPDK

Realtime Capture of High-Speed Traffic on Multi-Core Platform

Real-time intrusion detection for high-speed networks

Fast Parallelized TCP/IP Stack for High-Speed Network Intrusion Detection Systems

New Trend of Intrusion Detection System for High-speed Networks

Design and Implementation of Kilomega Wirespeed Intrusion Detect System

A Framework For Performance Evaluation Of ASIPS In Network-Based IDS

Improving the performance of NIDS using symmetric multi-processor

Design of Traffic Distributor Based on IXP1200 for Network Intrusion Detection System