| 面向深度分组检测的高速数据分组解析结构 |
| |
| 引用本文： | 董永吉,郭云飞,黄万伟,黄慧群.面向深度分组检测的高速数据分组解析结构[J].通信学报,2013,34(6):19-164. |
| |
| 作者姓名： | 董永吉 郭云飞 黄万伟 黄慧群 |
| |
| 作者单位： | 1. 国家数字交换系统工程技术研究中心，河南 郑州 450002；2. 解放军理工大学 指挥信息学院，江苏 南京 210007 |
| |
| 基金项目： | 国家重点基础研究发展计划（“973”计划）基金资助项目（2012CB315901）；国家高技术研究发展计划（“863”计划）基金资助项目（2011AA01A103）；国家科技支撑计划基金资助项目（2011BAH19B01） |
| |
| 摘 要： | 提出了一种面向深度分组检测的高速数据分组解析结构BiPPCS（bidirectional packet parsing architecture for content security）。结构采用内容萃取树描述协议的耦合关系从而提高了数据分组解析的灵活性；利用硬件双向并行流水线提升了数据分组解析的处理速率；通过使用节点映射算法来均衡各级流水线上的节点数目优化存储空间；分析和仿真显示BiPPCS在处理速率、空间利用率等方面能取得较好的均衡。
|
| 关 键 词： | 数据分组解析 深度分组检测 二叉trie树 网络安全 可重构 NetFPGA |
Deep packet inspection oriented high
speed packet parsing architecture |
| |
| Yong-ji DONG,Yun-fei GUO,Wan-wei HUANG,Hui-qun HUANG.Deep packet inspection oriented high
speed packet parsing architecture[J].Journal on Communications,2013,34(6):19-164. |
| |
| Authors: | Yong-ji DONG Yun-fei GUO Wan-wei HUANG Hui-qun HUANG |
| |
| Affiliation: | 1. National Digital Switching System Engineering Technological R＆D Center, Zhengzhou 450002, China;2. College of Command Information Systems, the PLA University of Science ＆ Technology, Nanjing 210007, China |
| |
| Abstract: | A deep packet inspection oriented high speed packet parsing architecture called BiPPCS (bidirectional packet parsing architecture for content security) was proposed. Firstly, the content extraction tree was used to describe the coupling of the protocol relationship to improve flexibility of the packet parsing. Secondly, hardware bi-directional parallel pipeline was used to enhance the processing rate of the packet parsing. Thirdly, a node mapping algorithm was used to balance the number of nodes on all pipeline stages to optimize the storage space. Analysis and simulation show that BiPPCS gets balance among the rate processing, resource consumption and other aspects. |
| |
| Keywords: | packet parsing deep packet inspection binary trie network security reconfiguration NetFPGA |
|
| 点击此处可从《通信学报》浏览原始摘要信息 |
|
点击此处可从《通信学报》下载全文 |
