Title
Hardware Supports for Network Traffic Anomaly Detection
Abstract
Modern network systems are plagued with unknown attacks every time. To detect these attacks, network security systems monitor the anomalous status of network traffics. Most of researches have focused on the software-based anomaly detection and, thus, they have suffered from huge performance declines in high speed and bandwidth networks over one giga bps on one side. Due to the potential performance overhead, they are difficult to frustrate network attacks in real-time. To solve this problem, the researches about network anomaly detection must change from the only software-based to the combination-based of hardware and software. In this paper, we present the hardware designs for supporting the traffic anomaly detection of network security systems, which are IDS and IPS, in the high speed network. First advantage of these designs is that to some degrees, they overcome limitations of hardware memory and gather effectively and quickly network traffics which require for the software anomaly detection. Second, in hardware level, they can determine whether the statuses of current networks are DoS attacks or Worm spreading.
Year
Venue
Keywords
2006
International Conference on Internet Computing
ids,network security,ips and anomaly detection.,real time,dos attack,anomaly detection
Field
DocType
Citations 
Anomaly detection,Computer science,Computer network,Real-time computing,Network traffic control
Conference
0
PageRank 
References 
Authors
0.34
11
2
Name
Order
Citations
PageRank
Dae-Won Kim171949.97
Jintae Oh2257.28