一种基于网络处理器的入侵检测系统

An Intrusion Detection System Based on Network Processor

针对目前入侵检测系统的处理速率远远不能满足网络的高速发展,通过对现有IDS的体系结构和算法进行重新设计,提出了一种新的网络入侵检测体系结构。新的体系结构采用网络处理器在网络底层实现数据的采集与分析,提高了IDS的运行速度和效率,能较好地适应高速网络环境下的入侵检测。

To change the situation of that currently the process speed of intrusion detection system can' t keep up with the high speed of network,this article proposes a new network intrusion detection system architecture by redesigning the IDS's architecture and arithmetic. The new architecture adopts the network processor to collect and analyze the date in the low level of network. It enhances the speed and efficiency of IDS and can adapt to high speed network.