期刊文献+
任意字段
题名或关键词
题名
关键词
文摘
作者
第一作者
机构
刊名
分类号
参考文献
作者简介
基金资助
栏目信息

一种基于多线程的混合深度包检测方法

A Deep Packet Inspection Method Based on Multi-Threading
下载PDF
导出
摘要 为了提高网络入侵检测速度和稳定性,提出了一种基于多线程的混合深度包检测方法.该方法首先采用正则表达式的线性系数来对规则集中的正则表达式进行分组,然后对不同正则表达式组采用不同压缩技术进行状态位压缩,生成不同FA(Finite Automata),最后采用多线程技术对生成的不同FA进行检测.通过实验验证,得出该方法具有较高的压缩和处理性能,同时能有效提高检测的速度和稳定性. The paper proposed a deep packet inspection method based on multi-threading. In this meth- od, the regular expressions of the rule sets were grouped by using regular expressions linear coefficient. Then the regular expressions generated different Finite Automata by using different compression technology to compress the status bit. Finally, the different Finite Automata were detected by using multi-threading technology. The experiments show that the method has higher compression and processing performance, and effectively improves the speed and stability of the detection.
作者 林丽娜 洪联系
机构地区 集美大学诚毅学院
出处 《集美大学学报（自然科学版）》 CAS 2014年第6期472-476,共5页 Journal of Jimei University：Natural Science
基金 福建省教育厅资助项目(JA14368 C13001)
关键词 正则表达式 深度包检测 多线程 有限自动机 网络安全 Regular expression Deep packet inspection Multi-threaded Finite automata Network security
分类号 TP3 [自动化与计算机技术—计算机科学与技术]
  • 相关文献

参考文献10

  • 1KUMARS, DHARMAP URI KAR S, YU F, et al. Algorithms to accelerate multiple regular expressions matching for deep packet inspection [ C ] //Proceedings of the 2006.
  • 2Conference on Applications, Technologies, Architectures, and Protocols for Computer Communications. New York: ACM Press, 2006: 339-350.
  • 3SMITHR, ESTAN C, JHA S. XFA : Faster signature matching with extended automata [ C ] //Proceedings of the 2008 IEEE Symposium Security and Privacy. Washington, DC: IEEE, 2008: 187-201.
  • 4BECCHI M, CROWLEY P. Extending finite automata to efficiently nmteh Perl-compatible regular expressions [ C ] // Proceedings of the 2008 ACM CoNEXT Conference. New York : ACM Press, 2008 : 108.
  • 5XIE T, FENG D G. A new differential for MD5 with its full differential path [EB/OL]. [2009-04-10]. http: //print. iacr. org/2008/230, pdf.
  • 6YU F, CHEN Z, DIAO Y, et al. Fast and memory-efficient regular expression matching for deep packet inspection [ C] //Proceedings of the 2006 ACM/IEEE Symposium on Architecture for Net Systems working and Communications. New York: ACM Press, 2006: 93-102.
  • 7徐乾,鄂跃鹏,葛敬国,钱华林.深度包检测中一种高效的正则表达式压缩算法[J].软件学报,2009,20(8):2214-2226. 被引量：28
  • 8于强,霍红卫.一组提高存储效率的深度包检测算法[J].软件学报,2011,22(1):149-163. 被引量：14
  • 9ZHENG LI, NENGHAI YU, YANG LI. Asynchronous Parallel Finite Automaton: a new mechanism for deep packet in- spection in cloud computing [J]. Journal of Internet Technology, 2010, 11(2) : 147-152.
  • 10姚远,刘鹏,单征,田双鹏.面向存储的正则表达式匹配算法综述[J].计算机应用,2009,29(12):3171-3173. 被引量：13

二级参考文献44

  • 1李伟男,鄂跃鹏,葛敬国,钱华林.多模式匹配算法及硬件实现[J].软件学报,2006,17(12):2403-2415. 被引量：42
  • 2MITRA A, NAJJAR W, BHUYAN L. Compiling PCRE to FPGA for accelerating SNORT IDS [C]//Proceedings of the 3rd ACM/IEEE Symposium on Architecture for networking and Communications Systems. New York: ACM Press, 2007:127 - 136.
  • 3BRODIE B, CYTRON R K, TAYLOR D E. A scalable architecture for high-throughput regular-expression pattern matching [ C ]// ISCA '06: Proceedings of the 33rd Annual Intemational Symposium on Computer Architecture. New York: ACM Press, 2006:191 - 202.
  • 4LEE J, HWANG S H, PARK N. A high performance NIDS using FPGA-based regular expression matching [ C]// Proceedings of the 2007 ACM Symposium on Applied Computing. New York: ACM Press, 2007:1187 - 1191.
  • 5LO C-T D, TAI Y-G, PSARRIS K. Hardware implementation for network intrusion detection rules with regular expression support [C]//Proceedings of the 2008 ACM Symposium on Applied Computing. New York: ACM Press, 2008: 1535- 1539.
  • 6KUMAR S, DHARMAPURIKAR S, YU F, et al. Algorithms to accelerate multiple regular expressions matching for deep packet inspection [C]// Proceedings of the 2006 Conference on Applications, Technologies, Architectures, and Protocols for Computer Communications. New York: ACM Press, 2006:339-350.
  • 7KUMAR S, TURNER J, WILLIAMS J. Advanced algorithms for fast and scalable deep packet inspection [C]//Proceedings of the 2006 ACM/IEEE Symposium on Architecture for Networking and Communications Systems. New York: ACM Press, 2006:81 -92.
  • 8BECCHI M, CROWLEY P. An improved algorithm to accelerate regular expression evaluation [ C]// Proceedings of the 3rd ACM/ IEEE Symposium on Architecture for Networking and Communications Systems. New York: ACM Press, 2007, 145 - 154.
  • 9FICARA D, GIORDANO S, PROCISSI G, et al. An improved DFA for fast regular expression matching [J]. ACM SIGCOMM Computer Communication Review, 2008,38(5) :29 -40.
  • 10SMITH R, ESTAN C, JHA S. Xfa: Faster signature matching with extended automata [C]// Proceedings of the 2008 IEEE Symposium on Security and Privacy. Washington, DC: IEEE, 2008:187 -201.

共引文献46

集美大学学报（自然科学版）
2014年 第6期

相关作者

内容加载中请稍等...

相关机构

内容加载中请稍等...

相关主题

内容加载中请稍等...

浏览历史

内容加载中请稍等...
;
使用帮助 返回顶部