Enhancing search speed in preprocessing mechanism of network intrusion detection systems using network on chip

Security of computer networks is a crucial part of today’s world. There are many existing tools that provide security for computer networks. Intrusion detection system (IDS) is one of these security tools that protects its local network from attacks by detection any malicious network activity. Every kind of IDS has some limitations about detection rate or execution time. Signature-based IDS is widely used in a computer network. A signature-based IDS has CPU limitations in the real-world networks. In this paper, a hardware approach was applied to the previous work. In fact, using network on chip (NoC) in the preprocessing part of IDSs is proposed. The results of implementation prove that NoC can reduce the execution time compared to that of the previous work. Therefore, this approach can increase the performance of all local networks while false alarm rate remained in an acceptable rate. Furthermore, increasing the speed of IDSs provides more security for the local network by increasing the security of IDSs.

کلیدواژه ها:

field-programmable gate array (FPGA) ، Heracles ، Intrusion detection systems (IDS) ، Network Security ، Network on Chip (NoC) ، Snort