Title
Scaling the Performance of Network Intrusion Detection with Many-core Processors
Abstract
In this work, we present a highly scalable network intrusion detection system on many-core processors. To maximize the NIDS performance, we take advantage of the underlying hardware and adhere to four design principles: shared-nothing architecture, computation offoading, lightweight data structure, and flow offoading. Through the experimental results, we find that our design choices can significantly improve the NIDS performance (79 Gbps with 1514B synthetic packets). We believe that our design decisions can be easily extended to other many-core processors and programmable NICs.
Year
DOI
Venue
2015
10.1109/ANCS.2015.7110135
Architectures for Networking and Communications Systems
Keywords
Field
DocType
many-core,network intrusion detection system,parallel,offloading
Data structure,Host-based intrusion detection system,Architecture,Computer science,Network packet,Real-time computing,Computation offloading,Pattern matching,Intrusion detection system,Scalability
Conference
ISBN
Citations 
PageRank 
978-1-4673-6632-8
1
0.35
References 
Authors
17
5
Name
Order
Citations
PageRank
Jaehyun Nam172.21
Muhammad Asim Jamshed21356.57
Byungkwon Choi3112.61
Dongsu Han499448.46
KyoungSoo Park5119873.47