摘要
互联网的飞速发展给信息审计系统中的内容还原提出了新的挑战。为了实现完整的内容还原,引入双向内容流表结构,实现了基于TCP序列号偏移的数据包存储,避免了数据包重传/乱序带来的问题。设计了基于IP对哈希索引的多连接关联还原,实现了多连接传输同一内容的准确还原。为了提高还原的性能,设计了基于多分配子的静态内存池,理论分析了优化的分配子大小设置问题。最后,以HTTP内容还原为例,验证了还原系统。
The rapid development of network brings new challenges to content reconstruction for information auditing system. In order to achieve accurate content reconstruction, we introduce a bi-directional content flow table to realize packet store based on the offset of TCP sequence number, and avoid the problems caused by packet retransmission and disorder. We design IP-pair hash indices to support multi-connection associated content reconstruction. To enhance performance, we propose to use multi-allocation unit based static-memory pool. We further study optimal setup of allocation unit size. At last, we verify our content reconstruction system with an example of HTTP content reconstruction.
出处
《微计算机信息》
2010年第33期63-65,86,共4页
Control & Automation
基金
基金申请人:张大方
项目名称:基于模型检查的软件错误定位技术研究
基金颁发部门:国家自然科学基金委(90718008)
关键词
信息审计
内容还原
双向内容流表
多连接
静态内存池
Information Auditing
Network content reconstruction
Bi-directional content flow table
Multiple connections
static-memory pool