High-Performance Stateful Intrusion Detection System

This paper is related with a stateful intrusion detection technology which is based on session state tracking in network intrusion detection systems(NIDSs). Today's network security systems are required high-performance as well as good functionality since the speed of the internet is increasing. But most of the software-based NIDSs(e.g. Snort) show inefficiency and even fail to perform for the faster internet. In this paper, we provide hardware-based stateful intrusion detection module to overcome these shortcomings of software-based solutions. By implementing stateful intrusion detection module in FPGA, we can solve the problem of performance and has capability of intrusion detection in future multi-gigabit network environment. In addition, we can improve the accuracy of intrusion detection with reducing false positive alerts.