Chia-Hao HsuSHENG-DE WANG2018-09-102018-09-102011-09http://scholars.lib.ntu.edu.tw/handle/123456789/366876Network security has been a main concern in the Internet. To address this issue, network intrusion detection or prevention tools have become indispensable for system security. In this paper we first propose a multi-core aware packet capture module and integrated it with a network intrusion detection system (NIDS). We then analyze the performance of the NIDS under different packet capture libraries in high speed networks. The proposed multi-core aware packet capture module, called Flow Ring, can enhance the performance of NIDS to meet the speed requirements without packet loss. Together with the techniques for the configuration of an NIDS with respect to multi-core and IRQ affinity, the proposed approach can get the most effective performance. © 2011 IEEE.Intrusion detection system; Linux kernel; Packet capture; Ring buffers[SDGs]SDG16Effective performance; Embedded network; Intrusion Detection Systems; Linux kernel; Multi core; Multi-core aware; Network intrusion detection; Network intrusion detection systems; Packet capture; Ring buffers; Speed requirement; System security; Computer crime; Computer operating systems; Embedded systems; Network security; Parallel processing systems; Intrusion detectionconference paper10.1109/ICPPW.2011.372-s2.0-80155161390