Browsing by Author "AL BEHAADILI, YOUSIF HOSAIN DAKHIL"
Now showing 1 - 1 of 1
Results Per Page
Sort Options
Item FPGA BASED PACKET HEADER CLASSIFICATION FOR NETWORK INTRUSION DETECTION SYSTEM USING SNORT RULES(2022-01-17) AL BEHAADILI, YOUSIF HOSAIN DAKHIL; Özbek, Mehmet EfeIn data communication through internet, network security became an influential issue. One way to support it is by classifying and filtering incoming packets within devices of network. Packet header classification is an essential task for network devices such as Intrusion Detection System (IDS), it is an important technique for secure networking and communication. Internet services and security tools utilize technique of packet classification which includes checking of each incoming packets against predefined rules. In this research, a new algorithm for packet header classification of network intrusion detection system based on Field Programmable Gate Array (FPGA) has been presented using finite state Machine (FSM) technique. The presented algorithm compares the header fields of incoming packet with predefined rules that stored in block ROM FPGA memory to finding the matching between them and applying some snort actions on them to classify the incoming packet. The FPGA platform has been chosen for this research because of its high speed and quality in processing especially in digital system design. The proposed packet header classification algorithm described in Verilog language and then implemented in Xc7a100tcsg324-1 FPGA board using Xilinx_Vivado 18.2 software. The simulation result show the proposed architecture can classify the incoming packet successfully as desired and the maximum throughput of more than 100 Mbps was achieved.