{'fraction_non_alphanumeric': 0.010465116279069767, 'fraction_numerical': 0.0011627906976744186, 'mean_word_length': 4.590909090909091, 'pattern_counts': {'":': 0, '<': 0, '<?xml version=': 0, '>': 0, 'https://': 0, 'lorem ipsum': 0, 'www.': 0, 'xml': 0}, 'pii_count': 0, 'substrings_counts': 0, 'word_list_counts': {'cursed_substrings.json': 0, 'profanity_word_list.json': 0, 'sexual_word_list.json': 0, 'zh_pornsignals.json': 0}}
Increasing Performance in High Speed NIDS

The increasing of network utilization and the weekly increase in the number of critical application layer exploits means Network Intrusion Detection Systems (NIDS) designers must find ways to speed up their attack analysis techniques when monitoring a fully-saturated network and maintaining a good false positive to false negative ratio. While increasing the CPU speed and RAM of the NIDS will help deal with more content analysis there is a point where the amount of money spent on the new hardware will not be proportional to the increase in speed of the content analysis. In general there are only a few things a user can do to help the NIDS keep up with today’s demands, such as limiting the amount of attacks that the NIDS looks for or load balancing via a layer 7 switch. The rest is up to the NIDS developers.