Abstract:Network intrusion prevention system (NIPS) becomes more complex due to the rapid growth of network bandwidth and requirement of network security. However existing solutions, either hardware-based or software-based cannot obtain a good tradeoff between performance and flexibility. In this paper, we propose a parallel NIPS architecture using emerging network services processor. To resolve the problems and bottlenecks of high-speed processing, we investigate the main design aspects which have dramatic impacts on most parallel network security system implementations: efficient and flexible pipeline and parallel processing, flow-level packet-order preserving, and latency hiding of deep packet inspection. To these key points, we address several optimizations and modifications with an architecture-aware design principle to guarantee high performance and flexibility of the NIPS on a network services processor implementation. Performance evaluation shows that, our prototype NIPS on Cavium OCTEON3860 processor can reach line-rate stateful inspection and multi-Gbps deep inspection performance.

Research on applying Network processor to parallel intrusion detection system

Embedded network processor based parallel intrusion detection

Intrusion Detection And Simulation For High-Speed Networks

Research of Distributed Pre-Decision Engine in Wireless Intrusion Prevention Systems

Implementation of Network Processor-Based Content Filtering

Towards High-Performance Network Intrusion Prevention System on Multi-core Network Services Processor

A Parallel Intrusion Detection System for High-Speed Networks

Improving the performance of NIDS using symmetric multi-processor

Hybrid Intrusion Detection System for Complicated Network

Traffic Distributor for High-Speed Network Intrusion Detection System

Study on adaptive trust alert correlation P2P overlay IDS

Fastpath-based VPN Gateway over Network Processor

Research on Distributed Intrusion Prevention System on High-Speed Networks

A Parallel Nids Pattern Matching Engine and Its Implementation on Network Processor

New Trend of Intrusion Detection System for High-speed Networks

Design of Traffic Distributor Based on IXP1200 for Network Intrusion Detection System

Real-time intrusion detection for high-speed networks

Handling high speed traffic measurement using network processors

PABCS: A Traffic Partition Algorithm for Parallel Intrusion Detection

Para-snort : a multi-thread snort on multi-core ia platform

Load Balancing Algorithm for High-Speed Network Intrusion Detection Systems