ETRI-Knowledge Sharing Plaform

KOREAN
논문 검색
Type SCI
Year ~ Keyword

Detail

Conference Paper High Performance Session State Management Scheme for Stateful Packet Inspection
Cited 6 time in scopus Download 0 time Share share facebook twitter linkedin kakaostory
Authors
Seung Yong Yoon, Byoung Koo Kim, Jin Tae Oh, Jong Soo Jang
Issue Date
2007-10
Citation
Asia-Pacific Network Operations and Management Symposium (APNOMS) 2007 (LNCS 4773), v.4773, pp.591-594
Language
English
Type
Conference Paper
DOI
https://dx.doi.org/10.1007/978-3-540-75476-3_73
Project Code
07MK1400, Development of Signature Generation and Management Technology against Zero-day Attack, Jong Soo Jang
Abstract
This paper relates to a method for performing Stateful Packet Inspection(SPI) in real time using a session table management scheme that allows more efficient generation of session state information. SPI is an important technique to reduce false positive alerts in network intrusion detection system(NIDS). As the number of session increases, this technique requires a higher processing speed, thereby causing performance problems. However, existing software-based solutions cannot perform real-time packet inspection ensuring the wire speed. To guarantee both performance and functionality with respect to statefulness, we designed and implemented SPIbased intrusion detection module in a FPGA to help alleviating a bottleneck in network intrusion detection systems in this paper. © Springer-Verlag Berlin Heidelberg 2007.
KSP Keywords
False positive, High performance, Intrusion Detection Systems(IDSs), Intrusion detection system(IDS), Number of Session, Packet inspection, Processing speed, Real-time packet, State information, State management, Wire speed