onvm-snort: Snort IDS ported to openNetVM
Snort is a free and open source network intrusion detection system owned by Cisco. Snort runs in conjuction with the openNetVM platform to provide enhanced security for packet processing.
openNetVM is a high performance NFV platform based on Intel DPDK and Docker containers. openNetVM is SDN-enabled, allowing the network controller to provide rules that dictate what network functions need to process each packet flow.
openNetVM is an open source version of the NetVM platform described in our NSDI 2014 paper, released under the BSD license.
The design challenges with integrating Snort into openNetVM's high performance NF chains are described in our KBNets 2017 paper.
To install Snort and configure it for openNetVM, please see the snort Installation guide for a thorough walkthrough.
- Jean Tourrilhes -- Hewlett Packard Labs
- Grace Liu -- GWU (Contact: guyue at gwu.edu)
- Riley Kennedy -- GWU
- Archit Pandey -- WiNG, NITK