Location via proxy:   [ UP ]  
[Report a bug]   [Manage cookies]                
skip to main content
10.1145/1882486.1882532acmconferencesArticle/Chapter ViewAbstractPublication PagesancsConference Proceedingsconference-collections
poster

SANS: a scalable architecture for network intrusion prevention with stateful frontend

Published: 19 October 2009 Publication History
  • Get Citation Alerts
  • Abstract

    Inline stateful and deep inspection for intrusion prevention is becoming more challenging due to the increase in both the volume of network traffic and the complexity of the analysis requirements. In this work, we pursue a novel architectural approach, named SANS, which takes both the advantage of new generation network processors for packet-header-based processing and the advantage of commodity x86 platforms for packet payload data processing. A session table scheme is designed for the stateful frontend in SANS to achieve wire speed inline processing.

    References

    [1]
    Sourdis, I., Dimopoulos, V., Pnevmatikatos, D. and Vassiliadis, S., 2006. Packet Pre-filtering for Network Intrusion Detection. ANCS 2006.
    [2]
    Handley, M., Paxson, V. and Kreibich, C. 2001. Network intrusion detection: evasion, traffic normalization, and end-to-end protocol semantics. SSYM 2001.
    [3]
    LBNL/ICSI Enterprise Tracing Project, http://www.icir.org/enterprise-tracing/index.html.

    Cited By

    View all
    • (2009)OASisProceedings of the 5th ACM/IEEE Symposium on Architectures for Networking and Communications Systems10.1145/1882486.1882502(66-67)Online publication date: 19-Oct-2009

    Index Terms

    1. SANS: a scalable architecture for network intrusion prevention with stateful frontend

      Recommendations

      Comments

      Information & Contributors

      Information

      Published In

      cover image ACM Conferences
      ANCS '09: Proceedings of the 5th ACM/IEEE Symposium on Architectures for Networking and Communications Systems
      October 2009
      227 pages
      ISBN:9781605586304
      DOI:10.1145/1882486
      Permission to make digital or hard copies of all or part of this work for personal or classroom use is granted without fee provided that copies are not made or distributed for profit or commercial advantage and that copies bear this notice and the full citation on the first page. Copyrights for components of this work owned by others than ACM must be honored. Abstracting with credit is permitted. To copy otherwise, or republish, to post on servers or to redistribute to lists, requires prior specific permission and/or a fee. Request permissions from [email protected]

      Sponsors

      Publisher

      Association for Computing Machinery

      New York, NY, United States

      Publication History

      Published: 19 October 2009

      Permissions

      Request permissions for this article.

      Check for updates

      Author Tags

      1. deep inspection
      2. intrusion prevention
      3. network processors
      4. session table
      5. stateful inspection

      Qualifiers

      • Poster

      Funding Sources

      Conference

      ANCS '09
      Sponsor:

      Acceptance Rates

      Overall Acceptance Rate 88 of 314 submissions, 28%

      Contributors

      Other Metrics

      Bibliometrics & Citations

      Bibliometrics

      Article Metrics

      • Downloads (Last 12 months)0
      • Downloads (Last 6 weeks)0
      Reflects downloads up to 26 Jul 2024

      Other Metrics

      Citations

      Cited By

      View all
      • (2009)OASisProceedings of the 5th ACM/IEEE Symposium on Architectures for Networking and Communications Systems10.1145/1882486.1882502(66-67)Online publication date: 19-Oct-2009

      View Options

      Get Access

      Login options

      View options

      PDF

      View or Download as a PDF file.

      PDF

      eReader

      View online with eReader.

      eReader

      Media

      Figures

      Other

      Tables

      Share

      Share

      Share this Publication link

      Share on social media