An efficient hardware architecture for deep packet inspection in hybrid intrusion detection systems

Intrusion Detection Systems are known as important security components to establish a protection mechanism for computer and network related resources. By increasing speed of computer networks, and also increasing number of incidents and complexity of attacks; IDSs need to intelligently process the inputs with high performance and precision. A key idea could be an implementation of hardware modules for some components of IDS. In this paper, an efficient hardware architecture is proposed for Network based Intrusion Detection Systems which able to detect known attacks and anomaly behavior over application protocols. Minimum time complexity, low storage cost and improved accuracy and correctness are some key features of the proposed IDS.