High performance session state management scheme for stateful packet inspection

  • Authors:

  • Seungyong Yoon;Byoungkoo Kim;Jintae Oh;Jongsoo Jang

  • Affiliations:

  • Electronics and Telecommunications Research Institute, Daejeon, Republic of Korea;Electronics and Telecommunications Research Institute, Daejeon, Republic of Korea;Electronics and Telecommunications Research Institute, Daejeon, Republic of Korea;Electronics and Telecommunications Research Institute, Daejeon, Republic of Korea

  • Venue:
  • APNOMS'07 Proceedings of the 10th Asia-Pacific conference on Network Operations and Management Symposium: managing next generation networks and services
  • Year:
  • 2007

Quantified Score

Hi-index 0.00

Visualization

Abstract

This paper relates to a method for performing Stateful Packet Inspection(SPI) in real time using a session table management scheme that allows more efficient generation of session state information. SPI is an important technique to reduce false positive alerts in network intrusion detection system(NIDS). As the number of session increases, this technique requires a higher processing speed, thereby causing performance problems. However, existing software-based solutions cannot perform real-time packet inspection ensuring the wire speed. To guarantee both performance and functionality with respect to statefulness, we designed and implemented SPI-based intrusion detection module in a FPGA to help alleviating a bottleneck in network intrusion detection systems in this paper.