基于协议分析的网络服务审计系统研究  

Network services audit system based on protocol analysis technology

作　　者：王涛[1] 田航[1] 

机构地区：[1]重庆邮电大学网络及信息管理中心,重庆400065

出　　处：《数字通信》2009年第4期41-44,共4页Digital Communications and Networks

基　　金：教育部"春晖计划"(Z2005-2-63002)

摘　　要：协议分析从网络通信协议特有的规则性出发,是目前先进的信息检测技术,它克服了传统的模式匹配技术和端口匹配的一些根本性缺陷,从而使网络服务审计系统能更加准确地进行判定,提供更精准的审计结果。根据高速网络数据监听的特殊情况,采用了网络处理器技术、并行CPU处理和一种针对流水线模型的MPMF反馈算法,该算法利用系统各个部分的内存使用情况,对负载均衡器做出不同优先级的反馈,有效地利用了系统资源,给出了满负荷情况下问题的解决方案。Protocol analysis is based on the specific rule of network communication protocol, and it is the advanced network information detecting technology. It gets rid of some shortcoming of traditional pattern-matching and port-matching technology. By using the protocol analysis, the network service audit system has more accurate judgment and audit ability. An algorithm of multi-priority memory feedback （MPMF） for pipelining model was presented. The MPMF algorithm forecasts and sends feedback of different priorities to the load balancer by the memory usage of every part of the system. It can effectively use the hardware resources and improve the overall data processing rate.

关 键 词：高速网络 内存反馈 网络服务审计 协议分析 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术] TP393[自动化与计算机技术—计算机科学与技术]