千兆线速入侵检测系统的设计与实现

Design and Implementation of Kilomega Wirespeed Intrusion Detect System

随着千兆网络开始在国内大规模普及,对千兆线速入侵检测系统等高性能网络安全产品的需求日益迫切。本文基于IXP2400、pp1200、TCAM芯片和CPCI2.16技术开发了千兆线速入侵检测系统硬件平台,并基于该平台设计并实现了一个千兆线速级入侵检测系统。该入侵检测系统较之用网络处理器(NP)和专用集成电路(ASIC)技术实现的千兆入侵检测系统具有结构开放、灵活,综合计算能力强,可靠性高等优势。

With the popularization of the kilomega wirespeed network, kilomega wirespeed intrusion detect system（ids） becomes necessary. Based on XpeediumTM CXE-16, ppl200, TCAM chip, CPCI 2. 16 technique, we propose a universal hardware platform, and design and implement a kilomega wirespeed intrusion system on the platform. Compared to those system based on NP or ASIC our system is good at structure, flexibility, computation, reliability.