Abstract:

A novel design approach to a network security prevention system based ona server is proposed. The structure sever host combined with a NetFPGA card is used. Packet filtering and contents detection are implemented on NetFPGA. The software on the protected host takes charge of configuration, updating rules and implementation of intrusion detection system. NetFPGA works with host via PCI interface. Hence, the combination of firewall and intrusion system is accomplished. Experimental results indicate that the network security protection system reacts accurately.

Key words: network security; intrusion detection; firewall; field programmable gate array(FPGA)