Approximate Packet Classification and Stateful Rule DFA for Cloud Intrusion Detection

摘要

This paper propose a new intrusion detection system architecture, which can be used by cloud intrusion detection. Our new architecture uses the inaccurate hashing to obtain a fast packet inspection and applies a new stateful rule DFA to track session inspection process. After a preliminary analysis, the new architecture should be feasible in the real application.