A parallel architecture for stateful, high-speed intrusion detection

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 5352 LNCS, Issue , 2008, Pages 203-220

  Foschini, Luca ^a   Thapliyal, Ashish V ^a   Cavallaro, Lorenzo ^a   Kruegel, Christopher ^a   Vigna, Giovanni ^a  

^a University of California   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

INTRUSION DETECTION SYSTEM (NIDS); NETWORK ATTACKS; PACKET MATCHING; PARALLEL ARCHITECTURES; SIGNATURE MATCHING; SUB-PROBLEMS;

COMPUTER CRIME; HIGH SPEED NETWORKS; INFORMATION SYSTEMS; PACKET NETWORKS; PARALLEL ALGORITHMS; SECURITY OF DATA;

INTRUSION DETECTION;

EID: 58449129431     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/978-3-540-89862-7_18     Document Type: Conference Paper

References (22)

1. Amdahl, G,: Validity of the Single Processor Approach to Achieving Large-Scale Computing Capabilities. In: Proceedings of the AFIPS Conference (1967)
2. Colajanni, M., Marchetti, M.: A parallel architecture for stateful intrusion detection in high traffic networks (September 2006)
3. Davoli, Pi.: Vde: Virtual distributed ethernet. Technical report (2004)
4. Davoli, R.: Vde: Virtual distributed ethernet. In: TRIDENTCOM 2005: Proceedings of the First International Conference on Test beds and Research Infrastructures for the DEvelopment of NeTworks and COMmunities, Washington, DC, USA, pp. 213-220. IEEE Computer Society, Los Alamitos (2005)
5. Eckmann, S., Vigna, G., Kemmerer, R.: STATL: An Attack Language forState-based Intrusion Detection. In: Proceedings of the ACM Workshop on Intrusion Detection Systems, Athens, Greece (November 2000)
6. Foschini, L.: A formalization and analysis of high-speed stateful signature matching for intrusion detection (2007)
7. Foschini, L., Thapliyal, A.V., Cavallaro, L., Kruegel, C, Vigna, G.: A Parallel Architecture for Stateful, High-Speed Intrusion Detection. Technical report (2008)
8. Garcia-Molina, H.: Elections in a Distributed Computing System. IEEE Transactions on Computers (1982)
9. Gates, C: Co-ordinated Port Scans: A Model. A Detector and An Evaluation Methodology. PhD thesis, Dalhousie University, Halifax, Nova Scotia (February 2006)
10. Kruegel, C, Valeur, F., Vigna, G., Kemmerer, R.A.: Stateful Intrusion Detection for High-Speed Networks. In: Proceedings of the IEEE Symposium on Security and Privacy, Oakland, CA, May 2002, pp. 285-293. IEEE Press, Los Alamitos (2002)
11. Kumar, S., Spafford, E.H.: A Pattern Matching Model for Misuse IntrusionDetection. In: Proceedings of the 17th National Computer Security Conference, pp. 11-21(1994)
12. Lu, H., Zheng, K., Liu, B., Zhang, X., Liu, Y.: A Memory-Efficient Parallel String Matching Architecture for High-Speed Intrusion Detection. IEEE Journal on Selected Areas in Communication 24(10) (October 2006)
13. Meier, M., Schmerl, S., Koenig, H.: Improving the Efficiency of Misuse Detection. In: Proceedings of RAID (2005)
14. Paxson, V.: Bro: A System for Detecting Network Intruders in Real-Time. In: 7th Usenix Security Symposium (1998)
15. Roesch, M.: Snort - Lightweight Intrusion Detection for Networks. In: Proceedings of the Large Installation System Administration Conference (LISA), Seattle, WA (November 1999)
16. Sekar, R,., Guang, V., Verma, S., Shanbhag, T.: A High-performance Network Intrusion Detection System. In: Proceedings of the 6th ACM Conference on Computer and Communications Security (November 1999)
17. Snort - The Open Source Network Intrusion Detection System (2004), http://www.snort.org
18. Sommer, R., Paxson, V.: Exploiting Independent State For Network Intrusion Detection. In: Proceedings of ACSAC (2005)
19. The open source community. Snort Community ruleset
20. Turner, A.: tcprewrite trac page, http://tcpreplay.synfin.net/trac/wlkl/ tcprewrlte
21. Vallentin, M., Sommer, R., Lee, J., Leres, C, Paxson, V., Tierney, B.: The NIDS Cluster: Scalable, Stateful Network Intrusion Detection on Commodity Hardware. In: Kruegel, C, Lippmann, R., Clark, A. (eds.) RAID 2007. LNCS, vol. 4637. Springer, Heidelberg (2007)
22. Xinidis, K., Charitakis, I., Antonatos, S., Anagnostakis, K., Markatos, E.: An active splitter architecture for intrusion detection and prevention. IEEE TDSC 3(1), 31 (2006)