Generation of high-performance protocol-aware analyzers with applications in intrusion detection systems

Jordi Ros-Giralt; Peter Szilagyi; James Ezick; David Wohlford; Richard Lethin

doi:10.1117/12.848702

28 April 2010 Generation of high-performance protocol-aware analyzers with applications in intrusion detection systems

Jordi Ros-Giralt, Peter Szilagyi, James Ezick, David Wohlford, Richard Lethin

Proceedings Volume 7709, Cyber Security, Situation Management, and Impact Assessment II; and Visual Analytics for Homeland Defense and Security II; 770909 (2010) https://doi.org/10.1117/12.848702
Event: SPIE Defense, Security, and Sensing, 2010, Orlando, Florida, United States

Abstract

Traditional Intrusion Detection and Prevention (IDP) systems scan packets quickly by applying simple byte-wise pattern signatures to network flows. Such a protocol-agnostic approach can be compromised with polymorphic attacks: slight modifications of exploits that bypass pattern signatures but still reach corresponding vulnerabilities. To protect against these attacks, a solution is to provision the IDP system with protocol awareness, at the risk of degrading performance. To balance vulnerability coverage against network performance, we introduce a hardware-aware, compiler-based platform that leverages hardware engines to accelerate the core functions of protocol parsing and protocol-aware signature evaluation.

Citation Download Citation

Jordi Ros-Giralt, Peter Szilagyi, James Ezick, David Wohlford, and Richard Lethin "Generation of high-performance protocol-aware analyzers with applications in intrusion detection systems", Proc. SPIE 7709, Cyber Security, Situation Management, and Impact Assessment II; and Visual Analytics for Homeland Defense and Security II, 770909 (28 April 2010); https://doi.org/10.1117/12.848702

ACCESS THE FULL ARTICLE

INSTITUTIONAL
Select your institution to access the SPIE Digital Library.

SELECT YOUR INSTITUTION

PERSONAL
Sign in with your SPIE account to access your personal subscriptions or to use specific features such as save to my library, sign up for alerts, save searches, etc.

PERSONAL SIGN IN

No SPIE Account? Create one

PURCHASE THIS CONTENT

SUBSCRIBE TO DIGITAL LIBRARY

50 downloads per 1-year subscription

Members: $195

Non-members: $335 ADD TO CART

25 downloads per 1 - year subscription

Members: $145

Non-members: $250 ADD TO CART

PURCHASE SINGLE ARTICLE

Includes PDF, HTML & Video, when available