The Design of FPGA-Based Real Time Intrusion Detection NIC

Abstract:

The amount of intrusion detection calculation based on software is heavy, which can not satisfy the needs of modern network bandwidth; the intrusion detection technology based on hardware is an ideal method for accelerating network processing. The thesis proposes a design scheme for FPGA-based real time intrusion detection NIC, and introduces the hardware and software structure of the system n details. The system communicates with the operation system directly via PCI bus, achieves the organic combination of software detection and hardware detection, and overcomes the slow response speed of the system when only software is used for intrusion detection. In system hardware detection, with FPGA as core, arranging various intrusion detection algorithms in FPGA for parallel running can improve the real time and reliability of the system.

• Periodical: Applied Mechanics and Materials (Volumes 58-60)
• Pages: 2585-2591
• DOI: https://doi.org/10.4028/www.scientific.net/AMM.58-60.2585
• Online since: June 2011
• Authors: Bing Yuan Cheng, Kai Jin Qiu, Zu Yong Yang
• Keywords: Field-Programmable Gate Array (FPGA), Intrusion Detection System (IDS), NIC Design, PCI9054

References

[1] H. Debar,M. Dacier and A. Wespi: Towards ataxonomy of Intrusion-deteeti Systems. Computer Networks, 31(8), April (1999).

DOI: 10.1016/s1389-1286(98)00017-6

[2] Liu Na, Wang Wei: The Conspectus of Intrusion Detection Technology, China Data Communication, Jan. (2004).

[3] ZHOU Jianguo , CAO Qingguo , ZHAO Qingjun: Research on Computer Network Intrusion Detection System, Computer Engineeringm, 29(2), (2003).

[4] QING Si-han, JIANG Jian-chun, MA Heng-tai: Research on intrusion detection techniques. Journal of China Institute of Communications, 25(7): 20~29, (2004).