高速IDS系统中读写缓冲区的互斥机制

A Buffer Access Algorithm in High-Speed IDS

在网络入侵检测系统中,通常需要在内存中开辟缓冲区对网络报文进行采集和分析,但是传统的读写缓冲区的互斥机制在高速网络环境中的效率都不甚理想,无法满足对高速IDS系统的性能需求。该文提出的一种基于并发锁机制的双缓冲区互斥机制可以改善传统锁机制的资源利用率,很好地解决了报文到达流和报文处理能力之间的性能瓶颈问题,显著地提高了IDS系统的性能。

An access algorithm of buffer is usually used for collecting and analyzing network packets in network intrusion detection systems using misuse detection methods.However traditional access algorithm s of buffer have indicated unsatisfactory efficiencies over high-speed networks,which can not reach the performance requirements in high-speed IDS.This paper brings forward an access algorithm based on lock algorithm,with which the performance requirements in analyzing packets in a high-speed environment have been met rather successfully and the bottle-neck between the reaching flow and the ability of analyzing packets have been solved.