INTRUSION DETECTION SYSTEM IN IPV4-IPV6 NETWORK AND METHOD THEREOF

摘要

An IPv4/IPv6 network IDS(Intrusion Detection System) and a method for efficiently managing a session table therein are provided to improve the speed of packet pattern inspection for network security by managing information about a session, which should be maintained for pattern inspection, as a single table entry. An IPv4/IPv6 network IDS comprises a session table(722), a packet inspection part(710), and a packet interception part(700). The session table has a specific field which contains information about the directivity of an inputted packet. If a packet is inputted, the packet inspection part checks the session table and judges whether the packet has been inputted through a valid session. Based on a result from the packet inspection part, the packet interception part passes or intercepts the packet.