packet classification

ZDNet Resources

• sort by:
• Relevance
• Date
• Popularity

Fast Packet Classification for Snort by Native Compilation of Rules

Signature matching, which includes packet classification and content matching, is the most expensive operation of a signature-based Network Intrusion Detection System NIDS. This paper presents a technique to improve the performance of packet classification of Snort, a popular open-source NIDS, based on generating native code from Snort signatures. An obvious...

Tags: Snort, Packet Classification, Intrusion Detection, Security, Network Security, Networking

White papers 2008-10-10

Additional Resources

The technologies of Internet censorship

With Rafsanjani's speech supporting the resistance in Iran, it seems likely that a new phase of dissent over the fraudulent election will shortly emerge. That prospect may have the IT departments in the Iranian government beefing up their chops. Along those lines, NedaNet, an organization of "computer hackers and computer...

Tags: Traffic, Traffic Classification, Internet, Ssl/Tls, Authentication/Encryption, Network Security, VPNs, Productivity, Security, Networking, Telecommunications, Richard Koman

Blog posts 2009-07-21

Rule-Based Anomaly Detection on IP Flows

Rule-based packet classification is a powerful method for identifying traffic anomalies, with network security as a key application area. While popular systems like Snort are used in many network locations, comprehensive deployment across Tier-1 service provider networks is costly due to the need for high-speed monitors at many network ingress...

Tags: Network, IP, Intellectual Property, Networking, Research & Development, Business Operations

White papers 2009-01-20

An Interval Decision Diagram Based Firewall

This paper explores the use of Interval Decision Diagrams IDDs as the central structure of a firewall packet filtering mechanism. This is done by first relating the packet filtering problem to predicate logic, then implementing a prototype which is used in an empirical evaluation. The main benefits of the IDD...

Tags: Firewalls, Network Security, Security, Networking

White papers 2009-01-15

An MTIDD Based Firewall: Using Decision Diagrams for Packet Filtering

This paper explores the use of Multi-Terminal Interval Decision Diagrams MTIDDs as the central structure of a firewall packet filtering mechanism. This is done by first relating the packet filtering problem to predicate logic, then implementing a prototype which is used in an empirical evaluation. The main benefits of the...

Tags: Packet, Springer Science+Business Media, Firewalls, Network Security, Security, Networking

White papers 2009-01-06

Designing a Hardware-Accelerated Firewall With Two 10 Gbps Ports

High-speed packet filtering should be one of the first steps in securing any modern computer network. However, solutions over 1 Gbps are practically impossible to implement in software, and must be implemented with the use of specialized hardware. This paper describes the design of a two-port firewall for 10 Gbps...

Tags: Gbps, Hardware, CESNET, Target Platform, Firewalls, Network Security, Networking

White papers 2008-12-19

A Traffic-Based Intrusion Detection System in IPv6/4 Environments and Its Performance Analysis

This paper proposed a traffic-based intrusion detection system framework in IPv6/4 environments and a traffic-based intrusion method. Through the establishment of a mathematical model to identify the relationship among detection time, memory usage and classification, one achieved a highly effective detection method which considered both traffic characteristics and rule characteristics....

Tags: Method, Performance, Snort, Intrusion Detection System, Intrusion Detection, Network Security, Security, Networking

White papers 2008-07-01

Fast Classification of XML With Network Processors

As XML documents become steadily more prevalent for data storage and communication, there is a growing need for routing XML messages in a network. Ideally one would be able to route XML packets at line speed. An important technology for complex packet routing are so-called Network Processors, which have a...

Tags: Processor, Network, XML, Software/Web Development, Web Development

White papers 2008-01-01

Improving Distributed Firewalls Performance Through Vertical Load Balancing

This paper presents an extension to an existing hash based packet classification technique in order to improve its performance in a distributed network access control environment. The paper shows that such architecture can be modified so that flow states can be kept in a distributed fashion thus reducing the space...

Tags: Load Balancing, Environment, Digital Security, Productivity, Security

White papers 2008-01-01

Big Telco wants to ream you with "deep packet inspection"

You may experience mild discomfort The extremist "free market" crowd wants to toss hundreds of years of common and public law in the toilet so a few near-monopolies can maximize their profits and minimize your choices. Should you care? Only if you use the Internet. "We...

Tags: Network, Comcast Corp., Telecommunications Company, Cell Phone, Information, Nothing, Internet, Telecom & Utilities, Corporate Governance, Cellular Phones, Federal Government, Telecommunications, Business Operations, Corporate Law, Consumer Electronics, Personal Technology, Government, Robin Harris

Blog posts 2007-12-06

Offline/Realtime Traffic Classification Using Semi-Supervised Learning

Identifying and categorizing network traffic by application type is challenging because of the continued evolution of applications, especially of those with a desire to be undetectable. The diminished effectiveness of port-based identification and the overheads of deep packet inspection approaches motivate us to classify traffic by exploiting distinctive flow characteristics...

Tags: Application, Reed Elsevier Inc., Productivity, Networking

White papers 2007-07-13

An Adaptive End-to-End Loss Differentiation Scheme for TCP Over Wired/Wireless Networks

This paper proposes a robust end-to-end loss differentiation scheme to identify the packet losses due to congestion for TCP connections over wired/wireless networks. The paper uses the measured RTT values in determining whether the cause of packet loss is due to congestion over wired path or regular bit errors over...

Tags: Network, Congestion, TCP, Tcp/Ip, Networking, Wi-Fi, Wireless

White papers 2007-03-01

Optimal Policy for LSP Control in MPLS Networks

In nowadays there is a very active research in the field of MultiProtocol Label Switching MPLS, and more and more networks are supporting MPLS. MPLS is a switching technology to forward packets based on a short, fixed length identifier called label. MPLS uses indexing instead of long address matching, and...

Tags: MPLS, MPLS Network, Label Switched Path, Network Technology, Networking

White papers 2007-02-28

End-to-End Inference of Loss Nature in a Hybrid Wired/Wireless Environment

In a hybrid wired/wireless environment, an effective classification technique that identifies the type of a packet loss, i.e., a loss due to wireless link errors or a loss due to congestion, is needed to help a TCP connection take congestion control actions only on congestion-induced losses. The classification technique is...

Tags: Loss, Classification Technique, Productivity, Wi-Fi, Wireless

White papers 2007-01-01

Net Neutrality: Attack of the Clones

Well, yesterday's response to George Ou has turned into a broadside from Richard Bennett. He says here that my posting is the "silliest thing ever written about Net Neutrality." Without going into why being attacked by Richard is a badge of honor for reasonable people, I'm just going...

Tags: Snowe, network, QoS

Blog posts 2006-07-08

Let's put Net neutrality to bed: Engaging the George

Let's put Net neutrality to bed: Engaging the GeorgeOne more thought, let them go broke...The telcos claim they can't buiuld infastructure unless they increase profits. Ok, then don't.But you can believe the competition will find a way. Cities going wirelessMunicipal networking worked in Tacomaafter the carriers said the...

Tags: Internet, INTERNET IS, Net Neutrality, Vint, QoS, Vint Cerf

Discussion threads 2006-07-07