Design of packet detection system for high-speed network environment

As matching rules used in packet detection systems are more complicated, performance accelerating techniques are more needed. In this paper, we review a packet matching problem in NIDS and suggest a new fast packet matching teehnique which can adapt to packet matching rules made up of multiple fields. It first prepares a table which is arranged intrusion detection rules on the basis of comparative basis value extracted in each fields, finds a correct rule after comparing the comparative basis value with each field in every incoming new packets. Suggesting technique helps high speed packet matching system.