APPARATUS FOR DETECTING INTRUSION AND PACKET PROCESSING METHOD USING SAME

摘要

An embodiment of the present invention relates to an intrusion detecting apparatus having a plurality of cores which can more effectively process a packet by offloading a partial flow of the entire flow with a processor of a host machine according to a network traffic amount while realizing a partial function of functions performed at each core by using a programmable network interface, so as to reduce power consumption compared to that of the existing intrusion detecting apparatus, and reduce a packet processing overhead.