一种基于NP的深度检测防火墙新架构

An Novel Architecture of Deep Inspection Firewall Based on NP

深度检测防火墙(D IF)就是一种有效的解决网络供给方案。简要讨论了D IF的特性的基础上,通过分析D IF检测技术实现的处理要求,首先介绍并评估了一种基于A SIC的D IF架构的设计机理及漏洞,作为改进,设计了一种基于NP的D IF新架构。理论分析说明基于NP的架构在性能、灵活性和扩展能力方面更有优势,有利于D IF技术的进一步完善。

Deep Inspection Firewall （DIF） is an effective scheme against system vulnerabilities. Implementing the various detection techniques for DIF can require a large amount of computing power. After briefly discussion on the features ,an ASIC-based architecture of DIF is introduced and evaluated. As an improved one,a novel NP-based architecture of DIF is presented. The theoretic analysis shows that NP-based architecture has advantages over ASIC-based architecture in respect of performance ,flexibility and extension capacities.