Self-Reconfigurable Advanced Packet Processor Module for Intrusion Detection

"ISC proposes to develop a self-reconfigurable packet processor module for Intrusion Detection Systems (IDS). This module will allow intrusion detection algorithms to operate at line data rates up to OC-192 by accessing the appropriate detection algorithmfrom the built-in memory via a wide bus. The module will use a programmable gate array (FPGA)/co-processor coupled with up to 512 MB memory. The processing speed of information at high data rates enables on-the-fly reconfiguration of IDS algorithmsdepending on the data pattern. This speed is critical for target identification and tracking purposes. Bit-processed operation over data is performed at line-rate detecting any anomaly that may exist and preventing the anomaly information fromperpetrating onto the existing system, network, or machine. Multiple modules coupled together are capable of rapid recovery through their distributed processing interconnection. Multiple modules can fit on a single 3 x 5 network card for ease ofmaintenance and future R&D missile projects. The IDS module can be used to secure any military communication system and can be inserted into any platform due its compact size. The IDS module can also be installed in existing routers, servers, and othermachines to expand the Intrusion Detection System within the total network architecture - local, regional, and global in scope."