摘要
在分析了骨干网入侵检测系统性能瓶颈的基础上 ,提出并实现了一种面向入侵检测系统的用户级报文传输机制———ULMM (User LevelMessagingMechanism )。该通讯机制采用零拷贝技术 ,能够将传统TCP/IP协议栈从操作系统中旁路掉 ,利用异步DMA的方式实现用户层报文传输 ,从而有效地降低了入侵检测系统的通讯开销。试验证实 ,采用该通讯机制 。
A user level messaging mechanism (ULMM) for Intrusion Detection System (IDS) is proposed and implemented on the basis of analysis over performance bottleneck of IDS in a backbone network. In ULMM, a zero copy method is adopted and the traditional TCP/IP protocol stack is bypassed from OS by passing message to/from user buffer with the aid of asynchronous DMA, so the communication overhead of IDS is efficiently reduced. Experimental evaluation illustrates that a very high speed of processing message and a very low ratio of CPU utilization are attained for an IDS with ULMM in a large scale network.
出处
《高技术通讯》
EI
CAS
CSCD
2003年第10期9-14,共6页
Chinese High Technology Letters
基金
86 3计划 (2 0 0 2AA14 2 0 2 0
2 0 0 1AA14 70 10B)资助项目
