Host Intrusion Prevention System Using Signature File Method

With networking speeds doubling every year, it is becoming increasingly difficult for software based solutions to keep up with system performance. Hardware based solutions provides high speed and better performance. Specifically we developed signature file method, which is fast and efficient method for intrusion detection systems. This paper introduces a novel and efficient VLSI architecture of signature file method based host intrusion prevention system. The VLSI architecture is implemented on the field programmable gate array (FPGA) as it provides the flexibility of reconfigurability and reprogram ability. Intrusion sequences can be detected by using a flexible pattern matching model called similarity match which enables the system to not only reduce false positive alarms, but also detect clever intruders with unexpected behavior. Hence the host based hardware detects malicious attacks, and blocks those attacks to protect it self.