National Institute of Advanced Industrial Science and Technology (AIST)
Research resultsPublications > AIST TODAY > 2007-No.25
AIST TODAYNo.25 Summer 2007 [ PDF:4.1MB ]


Intrusion protection system for large-scale networks

Kenji Toda
e-mail address
Toshihiro Katashita
e-mail address
Information Technology Research Institute


Network security is vital to the achievement of safety in modern society. Cyber attacks to the computer networks of companies, schools, and governments sometimes cause serious damage with service stoppage and /or information leak. "Snort" is commonly-used open software which accumulates rules to detect attacks, although processing speed is limited. We have developed high-speed hardware system where multiple pattern matching is performed in parallel by employing non-deterministic automaton, at the same time hardware compaction is achieved by sharing circuit elements all over the applied rules. Our system detects and eliminates attacks at the speed of 10 Gbps with 1,225 rules, setting a new world record. Since the circuit logic is automatically generated from the Snort rules by our developed program and is written to the FPGA (a logic programmable device) of the system, it is very easy to update the system against new kinds of attacks.

Figure
Report on cyber-attacks detected by the intrusion protection system.

Relational Information

AIST TODAY Vol.7, No.6 p.33 (2007)



 back