通信学报Issue(6)：156-164,9.DOI:10.3969/j.issn.1000-436x.2013.06.019
面向深度分组检测的高速数据分组解析结构
Deep packet inspection oriented high speed packet parsing architecture
摘要
Abstract
A deep packet inspection oriented high speed packet parsing architecture called BiPPCS (bidirectional packet parsing architecture for content security) was proposed. Firstly, the content extraction tree was used to describe the coupling of the protocol relationship to improve flexibility of the packet parsing. Secondly, hardware bi-directional paral-lel pipeline was used to enhance the processing rate of the packet parsing. Thirdly, a node mapping algorithm was used to balance the number of nodes on all pipeline stages to optimize the storage space. Analysis and simulation show that BiPPCS gets balance among the rate processing, resource consumption and other aspects.关键词
数据分组解析/深度分组检测/二叉trie树/网络安全/可重构/NetFPGAKey words
packet parsing/deep packet inspection/binary trie/network security/reconfiguration/NetFPGA分类
信息技术与安全科学引用本文复制引用
董永吉,郭云飞,黄万伟,黄慧群..面向深度分组检测的高速数据分组解析结构[J].通信学报,2013,(6):156-164,9.基金项目
国家重点基础研究发展计划（“973”计划）基金资助项目（2012CB315901）；国家高技术研究发展计划（“863”计划）基金资助项目（2011AA01A103）；国家科技支撑计划基金资助项目（2011BAH19B01）FoundationItemsTheNationalBasicResearchProgramofChina(973Program)(2012CB315901)；TheNationalHighTechnologyR&DProgramofChina(863Program)(2011AA01A103)；TheNationalKeyTechnologyR&DProgramofChina(2011BAH19B01) （973Program）
