NU 2008-182

Inventors

Yan Chen*

Zhichun Li

Gao Xia

Bin Liu

Short Description

A network intrusion and prevention system

Abstract

Northwestern researchers have designed a new network defense system called NetShield that detects network intrusions more accurately and efficiently than current systems.  Because emerging polymorphic attacks have made it difficult to detect network intrusions, there is a great need to find effective and efficient methods for prevention and protection.  Netshield provides accurate detection as it utilizes vulnerability signatures.  Furthermore, it is extremely efficient, as it simultaneously matches thousands of these signatures in a scalable manner using little memory.

Applications

• Network intrusion detection or prevention systems (NIDS/NIPS)

Advantages

• Fewer false positive alerts
• Improved detection of vulnerabilities
• Fast stream-fashioned lightweight parsing scheme

IP Status

Issued US Patent No. 8,522,348