关键词: 入侵检测系统, 千兆网络, FPGA

Abstract: Traditional software-based network intrusion detection systems (NIDS) are becoming strained as network data-rate increases. A gigabit NIDS is implemented based on FPGA. The computationally intensive components of a NIDS such as stream capturing, packet resolving and pattern matching of rule set are implemented based on high-speed logic cells of FPGA. While human-machine interfacing module is implemented based on embedded system. Test shows that when working in pressing gigabit network, the system can achieve zero-loss rate.

Key words: NIDS, gigabit network, FPGA