期刊文献+

多核平台入侵检测系统报文匹配开销评估方法研究

RESEARCH ON EVALUATION OF PACKET MATCHING OVERHEAD FOR IDS BASED ON MULTI-CORE PLATFORM
下载PDF
导出
摘要 针对多核平台入侵检测系统的负载问题,提出一种报文匹配开销评估方法,采用层次分析法对影响报文匹配开销的多个因素进行综合分析,确定影响因素权重,建立评价指标计算模型,对报文匹配开销值评估。实验表明,该方法计算结果与实际测试值基本一致。 To support the load-balancing on IDS (intrusion detection system) based on multi-core platform, we propose a method to evaluate the overhead of packet matching. It uses AHP ( analytic hierarchy process) to analyse several factors affecting the packet matching overhead comprehensively, then calculates their weights and sets up a calculation model for evaluation indexes. Experiments demonstrate that the result calculated using this method is basically the same as the result from real tests.
出处 《计算机应用与软件》 CSCD 北大核心 2013年第7期79-82,共4页 Computer Applications and Software
基金 国家高技术研究发展计划项目(2011AA01A103) 长江学者和创新团队发展计划项目(IRT1012)
关键词 IDS 多核平台 层次分析法 报文匹配开销 IDS Multi-core AHP Packet matching overhead
  • 相关文献

参考文献8

  • 1Cncert. A Review of Intemet Security Situation of 2010 [R/OL]. http ://www. cert. org. cn/User Files/File/2010. pdf.
  • 2Bando M,Artan N S, Rihua Wei, et al. Range hash for regular expression prefiltering[ C ]//Architectures for Networking and Communications Systems (ANCS), 2010 ACM/IEEE Symposium on. 25 -26 Oct. 2010 : 1 - 12.
  • 3snort[ CWOL]. 2011. http ://www. snort, org/.
  • 4Saaty T L. Apply AHP into Resource Assignment, management and Conflict Analysis [ M ]. Beijing : Coal Industry Press, 1988.
  • 5Chen Cheng,Sun Yipin, Zhong Qiuxi, et al. Research on Intrusion Detection System Based on Commodity Multi-core Platform [ C ]//HPC- China. 2011.
  • 6DARPA. RFC791 [ S/OL]. 1981. http ://tools. ietf. org/html/rfc791.
  • 7Schuff D L, Pai V S, Willmann P, et al. Parallel Programmable Eth- ernet Controllers: Performance and Security [ J ]. Network, IEEE, 2007, 21 (4) :22 -28.
  • 8Tcpreplay[ CP/OL]. ( 2011 ). http ://tcpreplay. synfin, net/.

相关作者

内容加载中请稍等...

相关机构

内容加载中请稍等...

相关主题

内容加载中请稍等...

浏览历史

内容加载中请稍等...
;
使用帮助 返回顶部