Security Gateway System Team Design and Implementation of Security Gateway System for Intrusion Detection on High-speed Links

The fast extension of inexpensive computer networks has increased the problem of unauthorized access and tampering with data. As a response to increased threats, many network-based intrusion detection systems(NIDSs) have been developed, but current NIDSs are barely capable of real-time traffic analysis on Fast Ethernet links[1]. As network technology presses forward, Gigabit Ethernet has become the actual standard for large network installations. Therefore, there is an emerging need for security analysis techniques that can keep up with the increased network throughput[2]. We have made effort to design and implement IDS that is run as a lower branch of our system named ‘Network Security Control System’. Our IDS named ‘Security Gateway System ’ has a pattern matching approach through the FPGA(Field Programmable Gate Array) logic and kernel logic as detection mechanism that can be applied to Gigabit-Ethernet links. However, the real-time traffic analysis and high-speed intrusion detection is not an easy task. In this paper, we briefly introduce the whole architecture of our system designed to perform intrusion detection on high-speed links. And then, we present the efficient detection mechanism that is run b