Design and Implementation of Detection Engine Against IDS Evasion with Unicode

Summary

The fast extension of inexpensive computer networks has increased the problem of unauthorized access and tampering with data. As a response to increased threats, many Signature-based Intrusion Detection Systems have been developed. Current NIDSs are barely capable of real-time traffic analysis and detecting IDS evasion techniques on Fast Ethernet links. Gigabit Ethernet has become the actual standard for large network installations. Therefore, there is an emerging need for enhanced security analysis techniques that can keep up with the increased network throughput. This paper introduces the whole architecture of our system designed to perform intrusion detection on high-speed links and proposes the efficient Detection Engine against IDS evasion techniques that is run by FPGA logic.