数据包过滤模型的分析与研究  

Study and analysis of network packet filter model

作　　者：胡滨[1] 夏欣[1] 任守纲[1] 

机构地区：[1]南京农业大学信息科技学院,江苏南京210095

出　　处：《计算机工程与设计》2007年第5期1040-1042,共3页Computer Engineering and Design

基　　金：南京农业大学青年科技创新基金项目(KJ06023)

摘　　要：随着网络技术的迅速发展以及网络带宽的不断增大,网络安全问题也日益突出,网络数据包的捕获和过滤变作为保护网络免遭入侵的一种必不可少的手段,越来越多的应用在实际的生活中。研究证实,过滤模型直接决定了网络数据包的捕获效率,而传统的数据分析方法缺乏高效的数学模型作为理论支撑。在剖析数据包传输捕获机制的基础之上,详细分析了两种不同的谓词过滤模型的原理及操作过程,并对工作效率进行了对比分析,得出了可控制流图模型总体上优于过滤树模型的结论。With the rapid development of the network technology and the increase of the network band width, network security is becoming more and more important. As a necessary method, capture and monitoring of network packet has been widely used in real life. It is proved that filter model is subject to the efficiency of network packet capture and traditional data analyzing methods have no mathematical model as base. After network packet transition and capture mechanism is studied, two different predicate filter model are analyzed in detail and efficiency is compared with a result that CFG model is better than tree model in general.

关 键 词：网络数据包 谓词过滤模型 效率 可控制流图模型 过滤树模型 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]