A graphics processing unit based network intrusion detection system with bloom filter pattern matching algorithm
Network Intrusion Detection System (NIDS) is a network security system designed and built to detect malicious packets by monitoring the incoming and outgoing network packets. The computer network speed has now reached Gigabit per second (Gbps) due to rapid development of network hardware technologie...
Saved in:
主要作者: | |
---|---|
格式: | Thesis |
语言: | English |
出版: |
2015
|
主题: | |
在线阅读: | http://eprints.utm.my/id/eprint/48887/25/OngWenJianMFKE2015.pdf |
标签: |
添加标签
没有标签, 成为第一个标记此记录!
|
总结: | Network Intrusion Detection System (NIDS) is a network security system designed and built to detect malicious packets by monitoring the incoming and outgoing network packets. The computer network speed has now reached Gigabit per second (Gbps) due to rapid development of network hardware technologies. This project proposes a Graphics Processing Unit (GPU) based NIDS with Bloom Filter pattern matching algorithm. Bloom Filter is a set of data structures to determine if a given piece of data belongs to a set and it is widely used for the pattern matching applications. The system developed is able to support network packets with TCP, UDP and ICMP protocols. The developed system is simulated with Snort NIDS ruleset version 2.9. Experimental results indicate that the throughput achieved is 3.6 Gbps with a false positive probability of 3.04 x 10-8. |
---|