ETRI-Knowledge Sharing Plaform

KOREAN
논문 검색
Type SCI
Year ~ Keyword

Detail

Conference Paper FPGA based light-weight Security Gateway System
Cited - time in scopus Share share facebook twitter linkedin kakaostory
Authors
Dong-Ho Kang, Ki-Young Kim
Issue Date
2007-07
Citation
International Technical Conference on Circuits/Systems, Computers and Communications (ITC-CSCC) 2007, pp.386-387
Publisher
IEEE
Language
English
Type
Conference Paper
Abstract
Network intrusion detection systems often rely on matching patterns that are gleaned from known attacks. While this method is reliable and rarely produces false alarms, it has the obvious disadvantage that it cannot detect novel attacks. Accordingly, an alternative approach which can be a combination with pattern matching approach is needed. We have made effort to design and implement protocol anomaly approach to detect known and unknown attacks. This approach extracts a set of service fields from the application payload where many attacks occur and analyzes the value of fields to verify attack. This approach is implemented on the FPGA (Xilinx Virtex II pro) device to process packet at gigabit-per-second data rates.
KSP Keywords
Detection Systems(IDS), Gigabit-Per-Second(Gbps), Light-weight, Matching approach, Network Intrusion Detection System, Novel attacks, System network, Xilinx virtex, data rate, false alarm, gateway system