Design And Implementation Of Network Intrusion Detection System Based On Pattern Matching - MIDS

With the development of Internet and the tendency of information globalization, modern computer and network systems are plagued by security and privacy vulnerabilities. Especially, it is more vital to protect the critical data that transmit on the military C3I system, the bank system and so on.In fact, we can incrementally improve computer and network security through the use of computer security tools such as Intrusion Detection System, which can detect the attack in real time, suppress the attack nearly absolutely and diagnose the system fault promptly.There are many different methods on which an IDS can monitor system and network behavior, in the work reported in this dissertation, I chose the "signature-based" Network IDS and tried to expand on the functions and interactions of its sub-systems. NIDS often rely on exact string matching techniques. To keep up with increasing network speeds and traffic, I present a new light-weight exact pattern match algorithm. In this dissertation, I also described the effectiveness of its approach in our NIDS.