APPARATUS AND METHOD FOR NIDS AND NETWORK PROTECTION USING CHECK BOARD

摘要

An apparatus and a method for protecting a network by using a check board are provided to check packets, applied from a network having one or more gigabit transmission speed, at line speed based on hardware utilizing the check board. A pattern check unit(220) inspects whether an inputted packet received from a packet input unit(210) includes an attack pattern by using a check board where association capable of showing the attack pattern is recorded. If so, a pattern check result storage(230) stores pattern information of the detected attack pattern. If the attack pattern is shown as being distributed to two or more packets, a multi packet verifier(240) verifies the attack pattern by reassembling fragments of the distributed attack pattern in order by using the stored pattern information. A packet remover(250) removes packets having the detected attack pattern.