High-Performance Distributed NIDS Cluster Based on Hybrid Detection Platform

摘要

In this paper, we plan to design a high-performancedistributed NIDS cluster which is based on a hybridacceleration platform in a cost-effective approach, thetraffic from both the Internet and Intranet are firstly handledby light IDS to achieve the rapid detection speed. If thenetwork bandwidth exceeds the processing capacity of lightIDS, the traffic will be transmitted to the hybrid IDS clusterthrough the high-speed network distribution switch tocomplete deep packet detection. The whole system isexpected to achieve the detection speed in tens Gbps to100Gbps, we hope that through this system gives costeffectivenetwork protection with small to medium sizeorganization.