Switches to increase the analytical performance of a Network Intrusion Detection and Protection System (NIDPS) when deployed in highspeed networks. We have designed a real network to present experiments that use a Snort NIDPS. Our experiments demonstrate the weaknesses of NIDPSs, such as inability to process multiple packets and propensity to drop packets in heavy traffic and high-speed networks without analysing them. We tested Snort's analysis performance, gauging the number of packets sent, analysed, dropped, filtered, injected, and outstanding. We suggest using QoS configuration technologies in a Cisco Catalyst 3560 Series Switch and parallel Snorts to improve NIDPS performance and to reduce the number of dropped packets. Our results show that our novel configuration improves performance. Keywords: network security; intrusion detection system; intrusion protection system; parallel processing; switch configuration; Quality of Service IDPS technologies detect and react to unauthorised access to network systems, providing real-time monitoring of network traffic. IDPSs can be software-or hardware-based, or can be a combination of both. Hardware-based IDPSs are effective for large organizations and companies, but are very expensive. However, software-based IDPSs running on the same devices or servers can identify and deal with attacks generated from inside or from outside the network, and can also protect the security policies of that network and their internal threats. Deploying a firewall with an IDPS is a useful way to provide extra security and thus strengthen the network [11] . Intrusion detection is one of the most tested and reliable technologies to monitor incoming and outgoing network traffic and to identify unauthorized usage and mishandling of computer system networks [12] . In addition, intrusion detection identifies the activity of malicious attackers. It is critical to implement intrusion detection and prevention in computer networks that have high traffic and high-speed connectivity [13] .
In previous work REF , we presented experiments that demonstrated that Snort dropped packets when it was deployed in high speed traffic in analysis mode.
Improving network intrusion detection system performance through quality of service configuration and parallel technology
J. Comput. Syst. Sci.
J. Comput. Syst. Sci.
Mathematics Computer Science