A Multi-core Supported Intrusion Detection System

Author

Tian Daxin ; Xiang Yang

Author_Institution

Sch. of Comput. Sci. & Technol., Tianjin Univ., Tianjin

fYear

2008

fDate

18-21 Oct. 2008

Firstpage

50

Lastpage

55

Abstract

Integrated multi-core processors with on-chip application acceleration have established themselves as the most efficient method of powering next-generation networking platforms. New research has been conducted for addressing the issues of multi-core supported network and system security. This paper put forward an asymmetrical multiprocessing architecture multi-core supported anomaly intrusion detection system. The key idea is to use an independent core to run the intrusion detection system to monitor the host system. The detection method is based on the Hebb rule and uses libpcap to grab the network transmission packages. In the experiments, we use VMware which is configured to run the Ubuntu to simulate the IDS core. The results show that when the intrusion threshold is 0.3-0.5 the system performs best.

Keywords

microprocessor chips; multiprocessing systems; security of data; Hebb rule; VMware; asymmetrical multiprocessing architecture; integrated multicore processor; libpcap; multicore supported intrusion detection system; network transmission package; on-chip application acceleration; system security; Acceleration; Authentication; Computer architecture; Cryptography; Data security; Information security; Intrusion detection; Monitoring; Multicore processing; Protection; Intrusion Detection System; Multi-core; Network Security;

fLanguage

English

Publisher

ieee

Conference_Titel

Network and Parallel Computing, 2008. NPC 2008. IFIP International Conference on

Conference_Location

Shanghai

Print_ISBN

978-0-7695-3354-4

Type

conf

DOI

10.1109/NPC.2008.19

Filename

4663303