论文部分内容阅读
为了提高NIDS中模式匹配模块的处理性能,在分析相关研究的基础上,提出了一种具有multi-gigabit线速度处理能力的模式匹配引擎.该引擎采用按模式串长度和数目不同,在CAM或TCAM中均衡分组存储的方法,以及待测串切换等技术实现了multi-gigabit速率的处理性能和有效的存储空间利用.通过采用多个匹配模块并行处理的方式可以进一步提高引擎的处理能力.在200MHz的时钟工作频率下,系统输出的性能可以达到6Gbit/s以上.
In order to improve the processing performance of pattern matching module in NIDS, a pattern matching engine with multi-gigabit linear speed processing capability is proposed based on the analysis of relevant research.The engine uses the pattern length and number according to different patterns in the CAM or The method of balanced packet storage in TCAM and multi-gigabit rate processing and the efficient use of storage space are realized by techniques such as switching between strings to be measured, etc. The processing capability of the engine can be further improved by using multiple matching module parallel processing methods. 200MHz clock frequency, the system output performance can reach more than 6Gbit / s.