期刊导航

论文摘要

面向内容安全的报文解析结构研究

Research on Content Security-Oriented Packet Parsing Architecture

作者:董永吉(国家数字交换系统工程技术研究中心);郭云飞(国家数字交换系统工程技术研究中心;解放军理工大学);黄慧群(国家数字交换系统工程技术研究中心);黄万伟(国家数字交换系统工程技术研究中心)

Author:Dong Yongji(National Digital Switch System Eng. & Technol. R & D Center);Guo Yunfei(National Digital Switch System Eng. & Technol. R & D Center;The PLA Univ. of Technol. & Sci.);Huang Huiqun(National Digital Switch System Eng. & Technol. R & D Center);Huang Wanwei(National Digital Switch System Eng. & Technol. R & D Center)

收稿日期:2012-04-17          年卷(期)页码:2012,44(5):130-135

期刊名称:工程科学与技术

Journal Name:Advanced Engineering Sciences

关键字:报文解析;深度包检测;二叉trie树;内容安全;NetFPGA;可重构

Key words:packet parsing;DPI;binary trie;content security;NetFPGA;reconfigure

基金项目:国家“973”计划资助课题(2012CB315900;2012CB315905);国家科技支撑计划资助课题(2011BAH19B01)

中文摘要

灵活准确的萃取报文协议字段和有效载荷对深度包检测至关重要,提出了一种面向内容安全的协议解析结构实现高速网络下协议的灵活解析。首先定义内容萃取树来灵活描述协议的解析关系,其次设计了一种并行流水结构来满足线速协议解析,同时针对内容萃取树节点到流水线映射的失衡问题,提出一种节点均衡映射算法完成不同流水线级上节点数目的平衡,最后在NetFPGA-10G平台上仿真验证了结构的可行性,结果表明该结构在性能和资源占用上取得了较好的平衡。

英文摘要

A Content Security-Oriented Packet Parsing Architecture(CSOPPA) was proposed to achieve high-speed network protocol parses flexibly. First, the content extraction-trie (CE-trie) was defined to describe the parsing relationship of the protocol flexibly, then a parallel pipeline was designed to meet the wire-speed parsing, and a node balanced mapping algorithm (NBMA) was proposed to achieve the balance of the number of nodes among different pipeline stages. Finally, the feasibility of CSOPPA was verified on NetFPGA-10G platform. The simulation results showed that CSOPPA achieves the balance between the performance and resource consumption.

关闭

Copyright © 2020四川大学期刊社 版权所有.

地址:成都市一环路南一段24号

邮编:610065