Intrusion detection system for high-speed network

Wu Yang; Bin Xing Fang; Bo Liu; Hong Li Zhang

doi:10.1016/j.comcom.2004.03.001

Intrusion detection system for high-speed network

Wu Yang^*
, Bin Xing Fang
, Bo Liu
, Hong Li Zhang

^*Corresponding author for this work

Faculty of Computing

Harbin Institute of Technology
University of Houston

Research output: Contribution to journal › Article › peer-review

18 Scopus citations

Abstract

The increasing network throughput challenges the current Network Intrusion Detection Systems (NIDS) to have compatible high-performance data processing. In this paper, we describe an in-depth research on the related techniques of high-performance network intrusion detection and an implementation of a Rule-based High-performance Network Intrusion Detection System (RHPNIDS) for high-speed networks. By integrating several performance optimizing methods, the performance of RHPNIDS is very impressive compared with the popular open source NIDS Snort.

Original language	English
Pages (from-to)	1288-1294
Number of pages	7
Journal	Computer Communications
Volume	27
Issue number	13
DOIs	https://doi.org/10.1016/j.comcom.2004.03.001
State	Published - 15 Aug 2004

Keywords

High-speed network
Intrusion detection
Multi-pattern matching
Packet capture
Protocol analysis

Access to Document

10.1016/j.comcom.2004.03.001

Cite this

@article{a5ab5b3691834bd48ba65b87ba8f0565,

title = "Intrusion detection system for high-speed network",

abstract = "The increasing network throughput challenges the current Network Intrusion Detection Systems (NIDS) to have compatible high-performance data processing. In this paper, we describe an in-depth research on the related techniques of high-performance network intrusion detection and an implementation of a Rule-based High-performance Network Intrusion Detection System (RHPNIDS) for high-speed networks. By integrating several performance optimizing methods, the performance of RHPNIDS is very impressive compared with the popular open source NIDS Snort.",

keywords = "High-speed network, Intrusion detection, Multi-pattern matching, Packet capture, Protocol analysis",

author = "Wu Yang and Fang, \{Bin Xing\} and Bo Liu and Zhang, \{Hong Li\}",

year = "2004",

month = aug,

day = "15",

doi = "10.1016/j.comcom.2004.03.001",

language = "英语",

volume = "27",

pages = "1288--1294",

journal = "Computer Communications",

issn = "0140-3664",

publisher = "Elsevier B.V.",

number = "13",

}

TY - JOUR

T1 - Intrusion detection system for high-speed network

AU - Yang, Wu

AU - Fang, Bin Xing

AU - Liu, Bo

AU - Zhang, Hong Li

PY - 2004/8/15

Y1 - 2004/8/15

N2 - The increasing network throughput challenges the current Network Intrusion Detection Systems (NIDS) to have compatible high-performance data processing. In this paper, we describe an in-depth research on the related techniques of high-performance network intrusion detection and an implementation of a Rule-based High-performance Network Intrusion Detection System (RHPNIDS) for high-speed networks. By integrating several performance optimizing methods, the performance of RHPNIDS is very impressive compared with the popular open source NIDS Snort.

AB - The increasing network throughput challenges the current Network Intrusion Detection Systems (NIDS) to have compatible high-performance data processing. In this paper, we describe an in-depth research on the related techniques of high-performance network intrusion detection and an implementation of a Rule-based High-performance Network Intrusion Detection System (RHPNIDS) for high-speed networks. By integrating several performance optimizing methods, the performance of RHPNIDS is very impressive compared with the popular open source NIDS Snort.

KW - High-speed network

KW - Intrusion detection

KW - Multi-pattern matching

KW - Packet capture

KW - Protocol analysis

UR - https://www.scopus.com/pages/publications/2942561005

U2 - 10.1016/j.comcom.2004.03.001

DO - 10.1016/j.comcom.2004.03.001

M3 - 文章

AN - SCOPUS:2942561005

SN - 0140-3664

VL - 27

SP - 1288

EP - 1294

JO - Computer Communications

JF - Computer Communications

IS - 13

ER -

Intrusion detection system for high-speed network

Abstract

Keywords

Access to Document

Other files and links

Fingerprint

Cite this