一种基于NP的深度检测防火墙新架构  

An Novel Architecture of Deep Inspection Firewall Based on NP

作　　者：王晓雯[1] 尹少平[1] 

机构地区：[1]山西大学工程学院,太原030013

出　　处：《电力学报》2008年第4期314-315,327,共3页Journal of Electric Power

摘　　要：深度检测防火墙(D IF)就是一种有效的解决网络供给方案。简要讨论了D IF的特性的基础上,通过分析D IF检测技术实现的处理要求,首先介绍并评估了一种基于A SIC的D IF架构的设计机理及漏洞,作为改进,设计了一种基于NP的D IF新架构。理论分析说明基于NP的架构在性能、灵活性和扩展能力方面更有优势,有利于D IF技术的进一步完善。Deep Inspection Firewall （DIF） is an effective scheme against system vulnerabilities. Implementing the various detection techniques for DIF can require a large amount of computing power. After briefly discussion on the features ,an ASIC-based architecture of DIF is introduced and evaluated. As an improved one,a novel NP-based architecture of DIF is presented. The theoretic analysis shows that NP-based architecture has advantages over ASIC-based architecture in respect of performance ,flexibility and extension capacities.

关 键 词：深度检测防火墙 入侵检测系统 串连模式 网络处理器 专用集成电路 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]