Abstract
We present a software architecture that enables the use of the IXP1200 network processor in packet header analysis for network intrusion detection. The proposed work consists of a simple and efficient run-time infrastructure for managing network processor resources, along with the S2I compiler, a tool that generates efficient C code from high-level, human readable, intrusion signatures. This approach facilitates the employment of the IXP1200 in network intrusion detection systems while our experimental results demonstrate that provides performance comparable to hand-crafted code.
This is a preview of subscription content, log in via an institution to check access.
Access this chapter
Tax calculation will be finalised at checkout
Purchases are for personal use only
Preview
Unable to display preview. Download preview PDF.
Similar content being viewed by others
References
Intel IXA SDK ACE programming framework developer’s guide (June 2001), http://www.intel.com/design/network/products/npfamily/ixp1200.htm
Campbell, A., Chou, S., Kounavis, M., Stachtos, V., Vicente, J.: Netbind: A binding tool for constructing data paths in network processor-based routers. In: Proceedings of the 5th International Conference on Open Architectures and Network Programming (OPENARCH 2002) (June 2002)
Engler, D., Kaashoek, M.: DPF: Fast, flexible message demultiplexing using dynamic code generation. In: Proceedings of ACM SIGCOMM 1996, August 1996, pp. 53–59 (1996)
MRA traffic archive (September 2002), http://pma.nlanr.net/PMA/Sites/MRA.html
Roesch, M.: Snort: Lightweight intrusion detection for networks. In: Proc. of the1997 USENIX Systems Administration Conference (LISA) (November 1999), software available from http://www.snort.org/
Sobirey, M.: Intrusion detection systems, http://www-rnks.informatik.tu-cottbus.de/~sobirey/ids.html
Spalink, T., Karlin, S., Peterson, L.: Evaluating Network Processors in IP Forwarding. Technical report, Computer Science dep, Princeton University, November 15 (2000)
Spalink, T., Karlin, S., Peterson, L., Gottlieb, Y.: Building a robust softwarebasedrouter using network processors. In: Proceedings of the 18th ACM Symposiumon Operating Systems Principles, October 2001, pp. 216–229 (2001)
Author information
Authors and Affiliations
Editor information
Editors and Affiliations
Rights and permissions
Copyright information
© 2003 Springer-Verlag Berlin Heidelberg
About this paper
Cite this paper
Charitakis, I., Pnevmatikatos, D., Markatos, E., Anagnostakis, K. (2003). Code Generation for Packet Header Intrusion Analysis on the IXP1200 Network Processor. In: Krall, A. (eds) Software and Compilers for Embedded Systems. SCOPES 2003. Lecture Notes in Computer Science, vol 2826. Springer, Berlin, Heidelberg. https://doi.org/10.1007/978-3-540-39920-9_16
Download citation
DOI: https://doi.org/10.1007/978-3-540-39920-9_16
Publisher Name: Springer, Berlin, Heidelberg
Print ISBN: 978-3-540-20145-8
Online ISBN: 978-3-540-39920-9
eBook Packages: Springer Book Archive