BROWSE
Detail
Conference Paper
Hardware Supports for Network Traffic Anomaly Detection
Cited - time in 
Share 
Share
- Authors
- Dae Won Kim, Jin Tae Oh
- Issue Date
- 2006-06
- Citation
- International Conference on Internet Computing and Conference on Computer Games Development (ICOMP) 2006, pp.1-5
- Language
- English
- Type
- Conference Paper
- Abstract
- Modern network systems are plagued with unknown attacks every time. To detect these attacks, network security systems monitor the anomalous status of network traffics. Most of researches have focused on the software-based anomaly detection and, thus, they have suffered from huge performance declines in high speed and bandwidth networks over one giga bps on one side. Due to the potential performance overhead, they are difficult to frustrate network attacks in real-time. To solve this problem, the researches about network anomaly detection must change from the only software-based to the combination-based of hardware and software. In this paper, we present the hardware designs for supporting the traffic anomaly detection of network security systems, which are IDS and IPS, in the high speed network. First advantage of these designs is that to some degrees, they overcome limitations of hardware memory and gather effectively and quickly network traffics which require for the software anomaly detection. Second, in hardware level, they can determine whether the statuses of current networks are DoS attacks or Worm spreading.
- KSP Keywords
- DoS Attacks, Hardware and software, High-speed networks, Network Attack, Network system, Network traffic anomaly, Potential performance, Real-time, Software anomaly detection, network Security, network anomaly detection