Patent ID: 9342366
Filing Date: 2016-05-17
CPC Classification: G06F,H04L

Claim Text:
1. An intrusion detection method using a load balancer responsive to traffic conditions between a first processing unit and a second processing unit, the method comprising: receiving, by a packet acquisition unit, packets arriving from a plurality of reception queues, and storing packets belonging to an identical flow in a single task queue; determining at least one of a number of packets, account load, and power consumption, and determining whether the string check tasks being performed by the first processing unit alone or allocation of the character string check task to the second processing unit; in response to determination of the character string check tasks being allocated to the second processing unit, comparing character strings of the packets with a character string defined in a first detection rule of the first processing unit; and comparing the character strings of the packets with the character string defined in a second detection rule of the second processing unit, wherein the first processing unit comprises a central processing unit (CPU), the second processing unit comprises a graphic processing unit (GPU), the first character string check unit comprises a CPU character string unit, and the second character string unit comprises a GPU character string unit, and wherein allocating the character string check tasks for the packets to the CPU or the GPU comprises: determining the number of packets; and determining whether to allocate the character string check tasks to the CPU character string check unit or the GPU character string check unit based on the number of packets, and determining a number of packets to be allocated at one, time to the CPU character string check unit or the GPU character string check unit, wherein determining whether to allocate the character string check tasks to the CPU character string check unit or the GPU character string check unit and determining the number of packets to be allocated at one time to the CPU character string check unit or the GPU character string check unit comprises: determining whether to allocate the character string check tasks to the CPU character string check unit or the GPU character string check unit by determining one of a plurality of preset threshold value ranges within which the number of packets falls; and determining the number of packets to be allocated at one time to the CPU character string check unit or the GPU character string check unit based on the determined threshold value range, wherein determining the number of packets to be allocated at one time to the CPU character string check unit or the GPU character string check unit based on the determined threshold, value range comprises classifying the number of packets to be allocated at one time to one of the CPU character string check unit or the GPU character string check unit as one of minimum, intermediate and maximum values.