Research Of Intrusion Detection Techniques For High Speed Networks

Intrusion detection technology is an important technology in the field of information security. It plays a very important role in guaranteeing the network information safety. Since the concept of intrusion detection was proposed, it has been widespread concern by scholars and researchers. In recent years, it has developed very quickly. Intrusion detection theory was gradually improved, and intrusion detection technology has also improved significantly. However, the scale of computer network becomes larger and larger; the Complexity of network is also increasing day by day. The problems faced by the intrusion detection technology are also increasing. How to quickly and efficiently deal with a lot of network packets, timely, accurately find invasion behavior has become the focus of the researchers.In the high-speed network environment, the intrusion detection system has higher lost package rate, false positive rate and false negative rate. In this paper, we presented the main research work and its significance and carefully analyze these specific issues. This paper gives an intrusion detection system model which adapts to the environment of the high-speed network. Each module of the model is described. We carefully analyze several kinds of key technologies. In order to improve the packet capture speed, we give a kind of improved zero copy method which can reduce packet loss rate and improve the data storage speed. In the fifth chapter, we analyze two kinds of classic Pattern matching algorithm and give a more efficient algorithm. We also study the protocol analysis technology.Through these improvements, the performance of the intrusion detection system has improved significantly.