Beta
388760

Enhanced Aho-Corasick Algorithm for Network Intrusion Detection Systems

Article

Last updated: 23 Dec 2024

Subjects

-

Tags

-

Abstract

The exponential growth in internet data usage has created a pressing demand for highly efficient Network Intrusion Detection Systems (NIDS) capable of scaling with ever-increasing bandwidths to safeguard sensitive information. A cornerstone of NIDS, packet inspection, hinges on the ability to rapidly identify and analyze patterns within incoming data streams. The more diverse and extensive the pattern database, the more robust and effective the NIDS becomes. While the parallel failure-less version of the Aho-Corasick (AC) algorithm provides maximum parallelism, it faces significant memory constraints due to the large transition tables generated when dealing with a vast number of patterns. To mitigate this limitation and enhance the scalability of NIDS, we introduce a novel parallel failure-less compressed hashed variation of the Aho-Corasick algorithm. Our proposed approach leverages the power of compression and hashing techniques to significantly reduce memory consumption without compromising performance. Empirical evaluations demonstrate that our algorithm requires only a fraction (approximately the square root) of the memory footprint compared to the original parallel failure-less Aho-Corasick algorithm, making it a more practical and scalable solution for modern NIDS architectures.

DOI

10.21608/ijicis.2024.315432.1349

Keywords

Compression, Hashing, NIDS, GPU, Distributed Systems

Authors

First Name

Mahmoud

Last Name

Fayez

MiddleName

-

Affiliation

Computer Systems, FCIS

Email

mahmoud.fayez@cis.asu.edu.eg

City

-

Orcid

0000-0001-8688-9653

First Name

Anas

Last Name

Abbas

MiddleName

-

Affiliation

Computer systems department. FCIS

Email

anas.mohammed@cis.asu.edu.eg

City

-

Orcid

0009-0001-6583-6621

First Name

Heba

Last Name

Khaled

MiddleName

-

Affiliation

Department of Computer Systems, Faculty of Computer & Information Sciences, Ain Shams University, Abbasia, Cairo 11566, Egypt

Email

heba.khaled@cis.asu.edu.eg

City

cairo

Orcid

0000-0002-3126-9032

First Name

Said

Last Name

Ghoniemy

MiddleName

-

Affiliation

Prof at Faculty of Computer & Information Sciences, Computer Systems Department, Ain Shams University, Cairo , Egypt.

Email

ghoniemy1@cis.asu.edu.eg

City

-

Orcid

0000-0002-7436-956X

Volume

24

Article Issue

3

Related Issue

50851

Issue Date

2024-09-01

Receive Date

2024-08-25

Publish Date

2024-09-30

Page Start

83

Page End

92

Print ISSN

1687-109X

Online ISSN

2535-1710

Link

https://ijicis.journals.ekb.eg/article_388760.html

Detail API

https://ijicis.journals.ekb.eg/service?article_code=388760

Order

388,760

Type

Original Article

Type Code

494

Publication Type

Journal

Publication Title

International Journal of Intelligent Computing and Information Sciences

Publication Link

https://ijicis.journals.ekb.eg/

MainTitle

Enhanced Aho-Corasick Algorithm for Network Intrusion Detection Systems

Details

Type

Article

Created At

23 Dec 2024