Intrusion detection system, intrusion detection method, and communication apparatus using the same

摘要

There is provided an intrusion detection system which performs pattern matching between a reception packet and an intrusion detection rule. The intrusion detection system comprises: an inline-type intrusion detection unit for performing pattern matching between the reception packet and the intrusion detection rule before an application processes the reception packet; and a cancellation notification generation unit for generating a pattern matching cancellation notification while the pattern matching is performed by the inline-type intrusion detection unit. The inline-type intrusion detection unit is configured to cancel the pattern matching in response to the pattern matching cancellation notification.