摘要
针对大流量网络负载下的入侵检测性能瓶颈问题,论文研究和探讨了入侵检测系统的内容检测硬件加速技术,以开源软件Snort为实现平台,采用安全加速芯片对检测系统中最耗费计算资源的特征匹配操作实施加速处理,对实现的硬件加速原型系统给出对比测试实验结果,并进行了分析讨论。
In order to overcome the performance bottleneck of high speed network intrusion detection, technique of hardware content inspection acceleration for intrusion detection system is researched in this paper. Based on open source software Snort, security coprocessor is used to accelerate regular expression matching operations which mostly consume computing resources. Experiment on implemented hardware acceleration system is performed, and the results are discussed in light of current research in high performance intrusion detection.
出处
《信息安全与通信保密》
2007年第12期86-88,共3页
Information Security and Communications Privacy
基金
电子信息产业发展基金(编号:2007329)
关键词
入侵检测
硬件加速
模式匹配
intrusion detection
hardware acceleration
pattern match
