Function and Data Parallelization of Wu-Manber Pattern Matching for Intrusion Detection Systems

Mazen Kharbutli, Monther Aldwairi, Abdullah Mughrabi

Abstract


The safeguarding networks from malicious activities and intrusions continues to be one of the most important aspects in network security. Intrusion Detection Systems (IDSs) play a fundamental role in network protection. Unfortunately, the speeds of existing IDSs are unable to keep up with the rapid increases in network speeds and attack complexities. Fortunately, parallel computing on multi-core systems can lend a helping hand mitigating the performance gap. In this paper, novel and effective parallel implementations of the Wu-Manber (WM) algorithm for signature based detection system are proposed, implemented, and evaluated. The proposed function and data parallel algorithms prove to be effective in terms of execution time reduction and load balancing, thus providing swift intrusion detection at increased network bandwidths. The algorithm achieves an optimal load balance and an average speedup of 2 for four cores.


Keywords


Intrusion detection; pattern matching; parallel programming; Snort; Wu-Manber

Full Text:

PDF


DOI: http://dx.doi.org/10.5296/npa.v4i3.2069

Creative Commons License
This work is licensed under a Creative Commons Attribution 3.0 License.

To make sure that you can receive messages from us, please add the 'macrothink.org' domain to your e-mail 'safe list'. If you do not receive e-mail in your 'inbox', check your 'bulk mail' or 'junk mail' folders.

Copyright © Macrothink Institute ISSN 1943-3581