Self-Reconfigurable Advanced Packet Processor Module for Intrusion Detection

Irvine Sensors Corporation (ISC) proposes to develop a self-reconfigurable module as a fundamental part of a total Intrusion Detection Systems (IDS). Department of Defense (DoD) "anti-tamper techniques" are incorporated to protect U.S. technologies used within the module. Our solution permits the combination of existing and future intrusion detection algorithms within a re-configurable, programmable, compact, high-speed data processing module called the Advanced Packet Processor Module (APPM). The hardware components that make-up the module consists of a programmable gate array (FPGA)/co-processor coupled with ISC stacked memory. The ISC stacked memory consists of a variety of memory types. Processor and memory are connected using a very wide (720-bits+ wide) interconnect approach. The purpose of this module is to actively and passively detect, analyze and report any anomalous events indicating potential and actual network intrusions. This module incorporates existing intrusion detection algorithms for known signature detection and future intrusion detection agents and operates at line data rates up to OC-192 (10 Gigabits per second) not achievable by existing IDS devices. We will demonstrate the reconfigurable potential and anti-tamper techniques of the APPM using various data word sizes for IDS detection at high data rates.