Para-snor: A multi-thread snort on multi-core ia platform

Proceedings of the IASTED International Conference on Parallel and Distributed Computing and Systems

Volumn , Issue , 2009, Pages 47-54

  Chen, Xinming ^a   Wu, Yiyao ^a   Xu, Lianghong ^a   Xue, Yibo ^a,b   Li, Jun ^a,b  

^a TSINGHUA UNIVERSITY   (China)

^b TSINGHUA NATIONAL LABORATORY FOR INFORMATION SCIENCE AND TECHNOLOGY   (China)

Author keywords

Multi core; Network Security; Snort

Indexed keywords

HIGH PERFORMANCE NETWORKS; LOAD-BALANCING; MODULAR DESIGNS; MODULE DESIGN; MULTI CORE; MULTI-PATTERN MATCHING; MULTI-THREAD; NETWORK BANDWIDTH; OPEN-SOURCE; PARALLELIZATION STRATEGIES; PARALLELIZING; PERFORMANCE IMPACT; SECURITY THREATS; TEST SETUPS;

COMPUTER CRIME; INTRUSION DETECTION; PATTERN MATCHING;

NETWORK SECURITY;

EID: 77952371004     PISSN: 10272658     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (11)

1. M. Roesch. Snort - lightweight intrusion detection for networks. In the 13th USENIX Conference on System Administration, 1999.
2. V. Paxon. Bro: A system for detecting network intruders in real-time. In Proceedings of the 7th USENIX Security Symposium, San Antonio, TX, USA, January 1988.
3. V. Jacobson, C. Leres, and S. McCanne. Libpcap. HTTP://www.tcpdump.org/, June 1994.
4. M. Roesch. Snort 3.0. In CanSecWest 2009, 2009.
5. D. L. Schuff, Y. R. Choe, and V. S. Pai. Conservative vs. optimistic parallelization of stateful network intrusion detection. In the 12th ACM SIGPLAN symposium on Principles and practice of parallel programming, 2007.
6. Supra-linear packet processing performance with intel multi-core processors white paper. Intel Corporation, 2006.
7. H. Welte. libnetfilter queue project. HTTP://www.netfilter.org/projects/ libnetfilterqueue/index.html, June 2008.
8. Sourcefire. Clam antivirus 0.95.2 user manual. HTTP://www.clamav.com/, 2008.
9. R. Lippmann, J. W. Haines, D. J. Fried, J. Korba, and K. Das. The 1999 darpa off - line intrusion detection evaluation, 2001.
10. L. Laboratory. Darpa intrusion detection data sets. HTTP://www.ll.mit. edu/mission/communications/ist/corpora/ideval/data/index.html.
11. A. Turner. Tcpreplay. HTTP://tcpreplay.synfin.net/trac/.