An ids with an anti-virus engine

PURPOSE: An IDS(Intrusion Detection System) having a virus detection engine is provided to analyze and detect a virus through packet scan and file scan in real time by capturing all packet data intruded from the network. CONSTITUTION: A packet separator(207) secures the session information of the packet received by the communication with a network driver. A protocol decider(209) secures the protocol information of the packet. A packet scanning module(211) judges the virus existence by comparing the session information of the packet secured by the packet separator(207) with the virus information in the previously stored packet with each other. A file scanning module(213) receives the packet information of each protocol based on the protocol information secured from the protocol decider(209), forms the file information by gathering the received packet information in real time, and discriminates the virus existence of the file information.