Balanced indexing method for efficient intrusion detection systems

Authors:
BooJoong Kang;Hye Seon Kim;Ji Su Yang;Eul Gyu Im
Affiliations:
Department of Electronics and Computer Engineering, Hanyang University, Seoul, Korea;Department of Electronics and Computer Engineering, Hanyang University, Seoul, Korea;Department of Electronics and Computer Engineering, Hanyang University, Seoul, Korea;Division of Computer Science and Engineering, Hanyang University, Seoul, Korea
Venue:
ICISC'12 Proceedings of the 15th international conference on Information Security and Cryptology
Year:
2012

Citing 6
Cited 0

A Methodology for Synthesis of Efficient Intrusion Detection Systems on FPGAs

FCCM '04 Proceedings of the 12th Annual IEEE Symposium on Field-Programmable Custom Computing Machines
A High Throughput String Matching Architecture for Intrusion Detection and Prevention

Proceedings of the 32nd annual international symposium on Computer Architecture
Fast and memory-efficient regular expression matching for deep packet inspection

Proceedings of the 2006 ACM/IEEE symposium on Architecture for networking and communications systems
Packet pre-filtering for network intrusion detection

Proceedings of the 2006 ACM/IEEE symposium on Architecture for networking and communications systems
Methodology for Fast Pattern Matching by Deterministic Finite Automaton with Perfect Hashing

DSD '09 Proceedings of the 2009 12th Euromicro Conference on Digital System Design, Architectures, Methods and Tools
Rule indexing for efficient intrusion detection systems

WISA'11 Proceedings of the 12th international conference on Information Security Applications

Quantified Score

Hi-index	0.00

Visualization

Abstract

To protect a network from malicious activities, intrusion detection systems can be used. Most of intrusion detection systems examine incoming packets with detection signatures to detect potential malicious packets. Because the portion of malicious packets is usually very small, it is not efficient to examine incoming packets with all signatures. In this paper, we propose a method that reduces the number of signatures to be examined and show the experimental results of our proposed method.