TCP reassembly for signature-based network intrusion detection systems

Simple item page
dc.contributor.authorThinh, Tran Ngoc
dc.contributor.authorTomiyama, Shigenori
dc.contributor.authorKittitornkun, Surin
dc.contributor.authorVu, Tran Huy
dc.date.accessioned2026-08-06T10:04:52Z
dc.date.available2026-08-06T10:04:52Z
dc.date.issued2012-10-02
dc.description.abstractRapid development of network makes it a very important and vulnerable part of every field of life. Many intrusion detection systems are developed to protect the network using signature-based matching technique. For connection oriented protocols, such as Transmission Control Protocol, the data should be reassembled before being scanned by the matching engine. Several techniques are introduced to reassemble TCP packets on FPGA. However, they have some disadvantages such as inefficient memory, unscalable system, and unsupported complex TCP connections. In this paper, we propose a multi-linked-list approach and a combination of edge buffering scheme for TCP reassembly, which helps detecting cross packets intrusion signatures. Our architecture not only supports TCP connections with up to 4 concurrent holes, but also uses memory more efficiently than others. The experimental results show that our system can hold about 256K connections simultaneously and support up to 46K out-of-sequence connections with only 64MB DRAM. © 2012 IEEE.
dc.identifier.citation2012 9th International Conference on Electrical Engineering Electronics Computer Telecommunications and Information Technology Ecti Con 2012, 2012
dc.identifier.doi10.1109/ECTICon.2012.6254336
dc.identifier.other2-s2.0-84866757715
dc.identifier.urihttps://dspace.kmitl.ac.th/handle/123456789/4368
dc.source2012 9th International Conference on Electrical Engineering Electronics Computer Telecommunications and Information Technology Ecti Con 2012
dc.subjectEdge
dc.subjectFPGA
dc.subjectLinked list
dc.subjectSegment array
dc.subjectTCP reassembly
dc.titleTCP reassembly for signature-based network intrusion detection systems
dc.typeConference Paper

Files

Collections

Research