標題: Accelerating network security services with fast packet classification
作者: Shieh, S
Lee, FY
Lin, YW
資訊工程學系
Department of Computer Science
關鍵字: layer 4 switching packet classification;network security
公開日期: 15-Oct-2004
摘要: To protect a network, secure network systems such as intrusion detection system (IDS) and firewall are often installed to control or monitor network traffic. These systems often incur substantial delay for analyzing network packets. The delay can be reduced with fast packet classification, which can effectively classify network traffic, and consequently accelerate the analysis of network packets. In the last few years, many researchers devoted to providing fast packet classification methods for multidimensional classifier. However, these methods either suffer from poor performance and huge storage requirement, or are lack of dimension scalability. In this paper, we propose a packet classification method based on tuple space search, and use the multidimensional binary search tree (Kd-tree) to improve search performance. The proposed scheme requires only O(d log W) search time and controlled storage requirement, where d is the number of dimensions, and W is the utmost bit length for specifying prefixes in a classification rule. It features fast packet classification, and supports dynamic update which is a basic requirement of many secure network services, such as IDS and firewall. (C) 2004 Elsevier B.V. All rights reserved.
URI: http://dx.doi.org/10.1016/j.comcom.2004.05.003
http://hdl.handle.net/11536/25759
ISSN: 0140-3664
DOI: 10.1016/j.comcom.2004.05.003
期刊: COMPUTER COMMUNICATIONS
Volume: 27
Issue: 16
起始頁: 1637
結束頁: 1646
Appears in Collections:Articles


Files in This Item:

  1. 000223821900007.pdf