Multiprocessing scalable string matching algorithm for network intrusion detection system. (5th July 2019)

• Record Type: Journal Article
• Authors: Hnaif, Adnan A.; Aldahoud, Ali; Alia, Mohammad A.; Al'otoum, Issa S.; Nazzal, Duaa
• Is Part Of: International journal of high performance systems architecture. Volume 8:Number 3(2018)
• Page Start: 159
• Page End: 168
• Publication Date: 2019-07-05
• Subjects: string matching algorithms -- distributed architecture -- parallel processing -- network intrusion detection system -- NIDS; Computer architecture -- Periodicals; Computer systems -- Periodicals; High performance computing -- Periodicals; 004.205
• Languages: English
• ISSNs: 1751-6528

Abstract

With high increasing speed of today's computer networks which affects the performance of security issues in terms of detection speed, the traditional security tools such as firewall is insufficient to protect the networks from external threads. Intrusion detection systems (IDS) are one of the most reliable tools that can be used to monitor all the network traffic to identify unauthorised usage of computer system networks. In this paper, we have proposed a scalable string matching algorithm based on network IDS (NIDS) to enhance the speed of NIDS detection engine, which called multiprocessing scalable string matching algorithm for network intrusion detection system (MSNIDS). The MSNIDS implemented by using enhanced weighted exact matching algorithm (EWEMA) in both sequential and parallel processing. The MSNIDS based on EWEMA can be achieved more than 89% in sequential processing time compared with WEMA, and 86% in parallel processing time compared with sequential matching processing.