Computer and Modernization ›› 2012, Vol. 1 ›› Issue (1): 170-172.doi: 10.3969/j.issn.1006-2475.2012.01.044

• 信息安全 • Previous Articles     Next Articles

Design and Implementation of Gigabit NIDS Based on FPGA

LI Zhi-xiang, LIN Ke-cheng, WANG Yin-long, WANG Xi-wu, LI Qian-jin   

  1. Department of Computer Engineering, Ordnance Engineering College, Shijiazhuang 050003, China
  • Received:2011-10-18 Revised:1900-01-01 Online:2012-01-10 Published:2012-01-10

Abstract: Traditional software-based network intrusion detection systems (NIDS) are becoming strained as network data-rate increases. A gigabit NIDS is implemented based on FPGA. The computationally intensive components of a NIDS such as stream capturing, packet resolving and pattern matching of rule set are implemented based on high-speed logic cells of FPGA. While human-machine interfacing module is implemented based on embedded system. Test shows that when working in pressing gigabit network, the system can achieve zero-loss rate.

Key words: NIDS, gigabit network, FPGA

CLC Number: