You are here: silicon.com > Resources > White Papers > Security > Intrusion - Tampering > Network Security

Network Security White Papers

Applying Fast String Matching to Intrusion Detection

Tags:
network security

Overview The performance of signature-based network intrusion detection tools is dominated by the string matching of packets against many signatures. This paper studies how the popular intrusion detection system Snort can be best optimized to utilize different string matching algorithms. The paper analyzes the performance of Snort's current string matching algorithm, Boyer-Moore, and several alternate algorithms. The paper shows that no single algorithm is fastest in the context of a real Snort rule set. Instead, the paper develops a hybrid system that utilizes three different search algorithms, including one new algorithm presented in this paper. The result is a system that matches many common packets 5 times faster with an average speedup of 50%.

Further White Paper Details
Publisher	University of California	File Format	PDF
Date Published	January 2008
Format	White Papers
Topics	Network Security, Security Tools, Intrusion Detection Systems

Did you find this white paper useful? 2 out of 4 users found this white paper useful

Balancing Security Against Productivity

Publisher:
Novell

Security: New strides in preventing intrusions.

Publisher:
IBM

Novell Zenworks Endpoint Security Management: Total Control from a Single Console

Publisher:
Novell

Secure Desktop On-Demand Webcast

Publisher:
Novell

DTW - DODIIS Trusted Workstation: Intelligence Paradigm for the 21st Century

Publisher:
Sun Microsystems

Intel develops chip error detection tool

Intel has developed a simulation tool to test for so-called 'soft errors' that could occur in modern microprocessor technology. The error is expected to most easily affect the sub-0.25 micron process technology as alpha particles from the packaging...

Channel:
PDAs

US security council fights back

The pattern-matching system, known as the Federal Intrusion Detection Network (Fidet) would alert authorities to attacks which could cripple Government operations or even the economy. President Clinton may join forces with the FBI to protect...

Channel:
Security Strategy

Symantec celebrates multi-million pound deal

The multi-million pound deal with global information provider Reuters will see the security specialist provide intrusion detection, vulnerability management and risk assessment software. Reuters has been aware of our intrusion detection products...

Channel:
Security Strategy

Cisco set to cash in on network attack fears

Cisco has hinted it will be launching a gigabit speed intrusion detection system as well enhanced VPN products. The company already has the largest market share for network security devices, such as VPNs, firewalls and intrusion detection systems.

Channel:
Security Strategy

Hackers become the meat in a Cisco sandwich

The 4250 can inspect packets at gigabit speed which means quicker detection of any possible attackers and we believe it's the fastest of its kind," he said. Cisco has unveiled two new products as part of its intrusion detection systems (IDS...

Channel:
Security Strategy

Symantec launches multiple threat protection

Symantec has unveiled a hybrid software product which is designed to protect companies against various simultaneous threats. The product, called Symantec Client Security, features firewall, anti-virus and intrusion detection system (IDS) software...

Channel:
Security Strategy

Live Webcast: Telecoms 2.0 - Where is telecoms heading?

In this webcast, our panel of experts will review where we are with next generation telecoms in the UK, working through the concept of 'Telecoms 2.0': - Realising the potential of Next Generation Networks - why it isn't just about the technology? - What attributes should firms be looking for in their telco partner? - Is the relationship between telco provider and customer changing? - What things need to happen to make next generation services a reality? - You say you want the supplier to change. Do you want to change too? - What is Telecoms 2.0?

Publisher:
ZDNet UK

Telecom 2.0: Mind over matter

ntl:Telewest Business believes that the role of the telco is evolving. Gone are the days when it was enough to simply focus on circuits and minutes, customers now need a far higher degree of interaction and look for suppliers who will talk business solutions with them.

Publisher:
ntl:Telewest Business

IBM Information Server Change Data Capture

In today's fast-paced world, access to real-time data has never been more important. To be successful, organizations need to be able to report and analyze corporate data quickly and easily, regardless of what applications created the data, what platform they're running on, or what database they're stored in.

Publisher:
IBM

An examination of server consolidation: the trends that can drive efficiencies and help businesses gain a competitive edge

This white paper provides a starting point for organizations contemplating server consolidation. It includes an overview of server consolidation concepts and techniques and provides guidance on methodologies. It also looks at the potential cost savings associated with server consolidation and offers information on how organizations can sustain the advantage they have gained by consolidating their servers.

Publisher:
IBM

Also on silicon.com

Site Navigation:

Network Security White Papers

Applying Fast String Matching to Intrusion Detection

Quick Sitemap Links:

About Us

Search

Blogs

Verticals

Advertising Features

CNET Networks in Europe

CNET Networks in the United States

CNET Networks in Asia Pacific