| 基于多核处理器的入侵防御系统 |
| |
| 引用本文： | 姚隽兮,梁刚,龚勋,韩忠秋. 基于多核处理器的入侵防御系统[J]. 四川大学学报(自然科学版), 2010, 47(2): 263-268. DOI: 10.3969/j.issn.0490-6756.2010.02.010 |
| |
| 作者姓名： | 姚隽兮 梁刚 龚勋 韩忠秋 |
| |
| 作者单位： | 四川大学计算机学院,成都,610065;四川大学计算机学院,成都,610065;四川大学计算机学院,成都,610065;四川大学计算机学院,成都,610065 |
| |
| 基金项目： | 国家自然科学基金(60873246,60573130,60502011);教育部博士点基金(20070610032);四川大学青年科学基金（校青07001,校青07002） |
| |
| 摘 要： | 随着高速以太网的广泛应用和网络入侵行为的日益复杂化,对网络入侵防御系统性能的要求越来越高.通过对传统入侵防御系统工作原理的分析,设计并实现了基于多核处理器的入侵防御系统.通过对系统中的多核处理单元进行分组,并构建共享缓冲队列实现工作组间的数据传递,使得系统在多核处理器环境下能够并行工作.试验结果表明,改进后系统的效率有显著提高,丢包率也明显降低.
|
| 关 键 词： | 多核处理器 入侵防御 网络安全 |
Intrusion prevention system based on multicore-processor |
| |
| YAO Jun-Xi,LIANG Gang,GONG Xun,HAN Zhong-Qiu. Intrusion prevention system based on multicore-processor[J]. Journal of Sichuan University (Natural Science Edition), 2010, 47(2): 263-268. DOI: 10.3969/j.issn.0490-6756.2010.02.010 |
| |
| Authors: | YAO Jun-Xi LIANG Gang GONG Xun HAN Zhong-Qiu |
| |
| Affiliation: | College of Computer Science, Sichuan University;College of Computer Science, Sichuan University;College of Computer Science, Sichuan University;College of Computer Science, Sichuan University |
| |
| Abstract: | Requirements for a high-quality Intrusion Prevention System (IPS) are becoming more and more demanding with the wide use of high speed Ethernet and increasing complexity of network intrusion. By the analysis of the working principles in the traditional IPS, a improved IPS based on the multicore processor is designed and implemented. In this system, multicore processing units are divided into groups among which the data can be transmitted by building shared cache queues. In this way, IPS can work parallelized with a multicore processor. The results of our experiments demonstrate that the efficiency is greatly enhanced and that the packet loss ratio decreases. |
| |
| Keywords: | multicore-processor intrusion prevention network security |
| 本文献已被 万方数据 等数据库收录！ |
| 点击此处可从《四川大学学报(自然科学版)》浏览原始摘要信息 |
|
点击此处可从《四川大学学报(自然科学版)》下载全文 |
|
