Network intrusion detection based on shift-OR circuit

Huang Chun Roan; Wen Jyi Hwang; Wei Jhih Huang; Chia Tien Dan Lo

Network intrusion detection based on shift-OR circuit

Huang Chun Roan^*, Wen Jyi Hwang, Wei Jhih Huang, Chia Tien Dan Lo

^*Corresponding author for this work

Department of Computer Science and Information Engineering

Research output: Contribution to journal › Article › peer-review

Abstract

This paper introduces a novel FPGA-based signature match co-processor that can serve as the core of a hardware-based network intrusion detection system (NIDS). The key feature of the signature match co-processor is an architecture based on the shift-or algorithm, which employs simple shift registers, or-gates, and ROMs where patterns are stored. As compared with related work, experimental results show that the proposed work achieves higher throughput and less hardware resource in the FPGA implementations of NIDS systems.

Original language	English
Pages (from-to)	1229-1239
Number of pages	11
Journal	Journal of Information Science and Engineering
Volume	24
Issue number	4
Publication status	Published - 2008 Jul

Keywords

FPGA implementation
Network intrusion detection system
Pattern matching
Shift-or algorithm
String searching

ASJC Scopus subject areas

Software
Human-Computer Interaction
Hardware and Architecture
Library and Information Sciences
Computational Theory and Mathematics

Cite this

@article{31a2deb7c3c34642a1182f9d485e2781,

title = "Network intrusion detection based on shift-OR circuit",

abstract = "This paper introduces a novel FPGA-based signature match co-processor that can serve as the core of a hardware-based network intrusion detection system (NIDS). The key feature of the signature match co-processor is an architecture based on the shift-or algorithm, which employs simple shift registers, or-gates, and ROMs where patterns are stored. As compared with related work, experimental results show that the proposed work achieves higher throughput and less hardware resource in the FPGA implementations of NIDS systems.",

keywords = "FPGA implementation, Network intrusion detection system, Pattern matching, Shift-or algorithm, String searching",

author = "Roan, {Huang Chun} and Hwang, {Wen Jyi} and Huang, {Wei Jhih} and Lo, {Chia Tien Dan}",

year = "2008",

month = jul,

language = "English",

volume = "24",

pages = "1229--1239",

journal = "Journal of Information Science and Engineering",

issn = "1016-2364",

publisher = "Institute of Information Science",

number = "4",

}

TY - JOUR

T1 - Network intrusion detection based on shift-OR circuit

AU - Roan, Huang Chun

AU - Hwang, Wen Jyi

AU - Huang, Wei Jhih

AU - Lo, Chia Tien Dan

PY - 2008/7

Y1 - 2008/7

N2 - This paper introduces a novel FPGA-based signature match co-processor that can serve as the core of a hardware-based network intrusion detection system (NIDS). The key feature of the signature match co-processor is an architecture based on the shift-or algorithm, which employs simple shift registers, or-gates, and ROMs where patterns are stored. As compared with related work, experimental results show that the proposed work achieves higher throughput and less hardware resource in the FPGA implementations of NIDS systems.

AB - This paper introduces a novel FPGA-based signature match co-processor that can serve as the core of a hardware-based network intrusion detection system (NIDS). The key feature of the signature match co-processor is an architecture based on the shift-or algorithm, which employs simple shift registers, or-gates, and ROMs where patterns are stored. As compared with related work, experimental results show that the proposed work achieves higher throughput and less hardware resource in the FPGA implementations of NIDS systems.

KW - FPGA implementation

KW - Network intrusion detection system

KW - Pattern matching

KW - Shift-or algorithm

KW - String searching

UR - http://www.scopus.com/inward/record.url?scp=48849102716&partnerID=8YFLogxK

UR - http://www.scopus.com/inward/citedby.url?scp=48849102716&partnerID=8YFLogxK

M3 - Article

AN - SCOPUS:48849102716

SN - 1016-2364

VL - 24

SP - 1229

EP - 1239

JO - Journal of Information Science and Engineering

JF - Journal of Information Science and Engineering

IS - 4

ER -

Network intrusion detection based on shift-OR circuit

Abstract

Keywords

ASJC Scopus subject areas

Other files and links

Fingerprint

Cite this