全部 标题 作者
关键词 摘要

OALib Journal期刊
ISSN: 2333-9721
费用:99美元

查看量下载量

相关文章

更多...
软件学报  2007 

Fast Packet Inspection Using State-Based Bloom Filter Engine
基于有状态Bloom filter引擎的高速分组检测

Keywords: Bloom filter
网络安全
,网络入侵检测,分组检测,串匹配

Full-Text   Cite this paper   Add to My Lib

Abstract:

More and more network security applications depend on inspecting the content of the packets to detect the malicious attacks. To detect these attacks online, packet inspection demands exceptionally high performance. A lot of research works have been done in this field, and yet there is still significant room for improvement in throughput and scalability. This paper proposes a fast packet inspection algorithm based on state-based Bloom filter engines (SABFE). To achieve high throughput, parallel design is adopted when searching in one Bloom filter engine and between multiple Bloom filter engines. In addition, specific lookup table and prefix register heap are constructed in SABFE to keep the state of the matched prefix for the sake of detecting long patterns. The analysis and the evaluation show that the high throughput of the algorithm can satisfy the wire speed detection requirement when the low resource consumption in hardware resource further improves the scalability of SABFE.

Full-Text

Contact Us

service@oalib.com

QQ:3279437679

WhatsApp +8615387084133