期刊文献+
任意字段
题名或关键词
题名
关键词
文摘
作者
第一作者
机构
刊名
分类号
参考文献
作者简介
基金资助
栏目信息

深度包检测中的模式匹配算法研究

Pattern matching algorithm in deep packet inspection
下载PDF
导出
摘要 计算机网络技术飞速发展给人们生活带来便利的同时,也带来了严重的网络安全问题,由于各种网络攻击行为的不断出现,深度包检测逐渐成为网络安全的必然要求,作为影响深度包检测技术性能的模式匹配算法,成为研究的关键技术。对深度包检测中常见的一些模式匹配算法进行了分析和总结,并提出了进一步的研究方向。 The rapid development of computer network technology brings convenience for people＇s daily life, and serious problems of network security. Considering the diversified attacks against network, deep packet inspection （DPI） has gradually become indispensible to the network security, and the pattern matching algorithm that exerts great impact on DPI proves to be the key technique in research. Some common pattern matching algorithms in DPI are analyzed and summarized, the further research orientation is proposed at last.
作者 赵睿 杜慧敏 张丽果 王亚刚
机构地区 西安邮电学院计算机学院 西安邮电学院电子信息工程学院 西安电子科技大学微电子学院
出处 《现代电子技术》 2012年第3期100-103,共4页 Modern Electronics Technique
基金 国家自然科学基金项目资助(60976020):路由器SoC结构与复用技术研究 陕西省教育厅科研计划项目资助(2010JK833):IP地址查找结构及算法研究 陕西省教育厅科研计划项目资助(11JK1063):路由器SoC以及复用结构研究
关键词 网络安全 内容过滤 深度包检测 模式匹配算法 network security content filtering deep packet inspection pattern matching algorithm
分类号 TN711-34 [电子电信—电路与系统] TP302.7 [自动化与计算机技术—计算机系统结构]
  • 相关文献

参考文献22

  • 1CHEN Zhen, LIN Chuang, NI Jia, et al. AntiWorm NPU- based parallel bloom filters for TCP/IP content processing in Giga-Ethernet LAN [C]. [S. l.]: Proceedings of the IEEE Conference on Local Computer Networks 30th Anniversary, 2005.
  • 2CHO Y H, MANGIONE-SMITH W H. Deep network packet filter design for reconfigurable devices [J]. ACM Transactions on Embedded Computing Systems (TECS), 2008, 7(2): 1-26.
  • 3SUNG J S, KANG S M, LEE Y, et al. A multi-gigabit rate deep packet inspection algorithm using TCAM [C]// IEEE GLOBECOM 2005 proceedings.[S. l. ] :IEEE, 2005 : 453-457.
  • 4LIN P, LI Zhi-xiang, LIN Y, et al. Profiling and accelerating string matching algorithms in three network content security applications [J]. IEEE Communications Surveys Tutorials, 2006, 8(2): 24-37.
  • 5KNUTH D E, MORRIS Jr J H, PRATT V R. Fast pattern matching in strings [J]. SIAM Journal on Computing, 1977, 6: 323.
  • 6BOYER R S, MOORE J S. A fast string searching algorithm [J]. Communications of the ACM, 1977, 20 (10) 762-772.
  • 7CROCHEMORE M, CZUMAJ A, GASIENIEC L, et al. Speeding up two string-matching algorithms [J]. Algorithmica, 1994, 12(4):247-267.
  • 8ALLEN J. State of the practice of intrusion detection technologies [R]. [S. l. ] :DTIC Document, 2000.
  • 9AHO A V, CORASICK M J. Efficient string matching:an aid to bibliographic search [J]. Communications of the ACM. 1975, 18(6):333-340.
  • 10WU S, MANBER U. A fast algorithm for multi-pattern searching [R]. [S. l.]:Citeseer, 1994.

二级参考文献18

  • 1卢汪节,鞠时光.入侵检测系统中一种改进的AC算法[J].计算机工程与应用,2006,42(15):146-148. 被引量：6
  • 2Tuck N, Sherwood T, Calder B, et al. Deterministic memory - efficient string matching algorithms for intrusion detection[C]//Proc, of the IEEE INFOCOM conference. Hong Kong, China: Institute of electrical engineers inc., 2004 : 333 - 340.
  • 3Alfred V Aho, Margaret J Corasik. Efficient string matching:an aid to bibliographic search[J]. Communications of the ACM, 1975,18(6) :333 - 340.
  • 4Norton M. Optimizing pattem matching for intrusion detection[EB/OL]. [2004- 12- 10]. http://www. NIDSrezearch. org.
  • 5Martin Roesch. Snort user manual[ EB/OL]. [ 2008 - 08 - 28 ]. http://www. snort. org/docs/snort-htmanuals/htmanual-282/.
  • 6Fisk M,and Varghese G,An Analysis of Fast String Matching Applied to Content-based Forwarding and Intrusion Detection[C]//Technical Report CS2001-0670 (updated version),University of California-San Diego,2002.
  • 7Coit J,Staniford S,and McAlerney M,Towards Faster String Matching for Intrusion Detection or Exceeding the Speed of Snort[C]//DARPA Information Survivability Conference &Exposition Ⅱ (DISCEX'01),June,2001.
  • 8Sidhu R,Prasanna V.Fast Regular Expression Matching Using FPGAs[C]//Proceedings of the 9^th IEEE Symposium on Field-Programmable Custom Computing Machines (FCCM 01),Apr.2001.
  • 9Moscola J,Lockwood J,Loui R,and Pachos M,Implementation of a Content-Scanning Module for an Internet Firewall[C]//Proceedings of the 11^th Annual IEEE Symposium on Field-Programmable Custom Computing Machines (FCCM'03),Apr.2003.
  • 10Dharmapurikar S,Krishnamurthy P,Sproull T,and Lockwood J,Deep Packet Inspection Using Parallel Bloom Filters[J].Micro IEEE,Jan-Feb.2004,24(1):52-61.

共引文献9

现代电子技术
2012年 第3期

相关作者

内容加载中请稍等...

相关机构

内容加载中请稍等...

相关主题

内容加载中请稍等...

浏览历史

内容加载中请稍等...
;
使用帮助 返回顶部