@inproceedings{b682329ad21e4b35bd24f4810f9a835b,
title = "Snort offloader: A reconfigurable hardware NIDS filter",
abstract = "Software-based Network Intrusion Detection Systems (NIDS) often fail to keep up with high-speed network links. In this paper an FPGA-based pre-filter is presented that reduces the amount of traffic sent to a software-based NIDS for inspection. Simulations using real network traces and the Snort rule set show that a pre-filter can reduce up to 90\% of network traffic that would have otherwise been processed by Snort software. The projected performance enables a computer to perform real-time intrusion detection of malicious content passing over a 10Gbps network using FPGA hardware that operates with 10 Gbps of throughput and software that needs only to operate with 1 Gbps of throughput.",
author = "Haoyu Song and Todd Sproull and Mike Attig and John Lockwood",
year = "2005",
language = "English",
isbn = "0780393627",
series = "Proceedings - 2005 International Conference on Field Programmable Logic and Applications, FPL",
pages = "493--498",
booktitle = "Proceedings - 2005 International Conference on Field Programmable Logic and Applications, FPL",
note = "2005 International Conference on Field Programmable Logic and Applications, FPL ; Conference date: 24-08-2005 Through 26-08-2005",
}