Network Intrusion Detection Systems for High Security Networkings

摘要

During this time when Internet provides essential communication between an infinite numbers of people and is being increasingly used as a tool for commerce, security becomes a tremendously important issue to deal with. However, traditional widely used security methods such as firewalls, cryptography, and intrusion detection systems (IDS) have been unable to provide an effective security mechanism for defending high speed networks. In fact, nowadays high-speed networks are very popular; they play an increasingly important role in the domain of information technology, they provide us with a lot of advantages, but they present a big problem for security tools; as networks are becoming faster there is an emerging need for security analysis techniques that keep up with the increased network throughput. In this paper, we are interested in the network intrusion detection systems (NIDSs). In fact, existing NIDSs can barely keep up with bandwidths of some hundred Mbps, whereas nowadays, the network speed presses forward 10 Gbps. So, in order to protect such installations, we propose a new approach aiming at accelerating the intrusion detection operation. The approach is based on three main steps: traffic classification, load balancing and high availability mechanism. This paper describes the above mentioned approaches and presents an experimental evaluation of their effectiveness.