Provided by: International Journal of Information Security Science (IJISS)
Date Added: Jun 2014
Content or string matching is the core process of deep package inspection and pattern recognition used by the Network Intrusion Detection and Prevention Systems (NIDPSs). Although, there are many sophisticated algorithms in software it is an exhaustive process and still beneath the requirements of the high-speed network traffic. In this paper, is presented a flexible hardware solution i.e. microprocessor able to recognize known attack patterns and its variants to overcome the software NIDPS outage caused by 1Gbps (and beyond) throughputs on a single CPU core.