通信学报2011，Vol.32Issue(4)：158-165,8.
高速低功耗深度报文检测方法
Hish speed deep packet inspection method with low power dissipation
摘要
Abstract
Hish speed deep packet inspection using TCAM faces the problem of high power dissipation. A 2-phase DPI method BF-TCAM was proposed. The first phase used parallel Bloom filters to exclude the normal packets not including attack signatures. The second phase used TCAM to inspect suspicious packets including real attack packets and false positive packets of the first phase. The Bloom filters' false negative probability is zero and false positive probability is very low. Since most of the network data traffic does not include attack signatures, the method can get high speed deep packet inspection with low power dissipation.关键词
深度报文检测/三态内容寻址存储器/布鲁姆过滤器/功耗Key words
deep packet inspection/ TCAM/ Bloom filter/ power dissipation分类
信息技术与安全科学引用本文复制引用
朱国胜,余少华..高速低功耗深度报文检测方法[J].通信学报,2011,32(4):158-165,8.基金项目
国家高技术研究发展计划("863"计划)基金资助项目(2005AA121410) （"863"计划）
